Searching repository software vulnerabilities

Internet Explorer 6.0 does not warn users when

certificate | authority | Internet | Explorer | expired | users | does | warn | not |

Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack.


TUTOS 1.1 allows remote attackers to execute ar

file_newphp | repository | containing | uploading | accessing | arbitrary | attackers | directly | uploaded | execute | request | remote | allows | using | TUTOS | then | code | via |

TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code.


Multiple unknown vulnerabilities in viewcvs bef

vulnerabilities | Multiple | viewcvs | unknown | before |

Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.


CVS 1.12 and earlier on Debian GNU/Linux does n

CVS |

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash).


The mod_authz_svn Apache module for Subversion

authenticated | mod_authz_svn | unauthorized | Subversion | repository | command | earlier | access | 104-r1 | module | Apache | remote | allows | parts | users | write | copy | read | via | svn |

The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.


HP Version Control Repository Manager (VCRM) be

Repository | Manager | Version | Control |

HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen.


Multiple SQL injection vulnerabilities in Softb

vulnerabilities | Repository | injection | attackers | arbitrary | Resource | commands | Multiple | execute | Softbiz | earlier | Script | remote | allow | via | SQL |

Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sbres_id parameter in (a) details_res.php, (b) refer_friend.php, and (c) report_link.php, and (2) the sbcat_id parameter in (d) showcats.php.


NetObjects Fusion 9 (NOF9) allows remote attack

NetObjects | Fusion |

NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site.


liby2util in Yet another Setup Tool (YaST) in S

liby2util | another | Setup | Tool | Yet |

liby2util in Yet another Setup Tool (YaST) in SUSE Linux before Friday, October 07, 2005 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.


Directory traversal vulnerability in the "remem

vulnerability | Application | liveuserphp | Repository | Extension | Directory | traversal | "remember | feature | me" | PHP |

Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie.


Unspecified vulnerability in CORE: Repository f

vulnerability | Unspecified |

Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01.


Unspecified vulnerability in HP Version Control

vulnerability | Unspecified | Control | Version | before | Agent |

Unspecified vulnerability in HP Version Control Agent before 2.1.5 allows remote authenticated users to obtain "unauthorized access" to a remote Repository Manager account and potentially gain privileges via unspecified vectors.


Xerox WorkCentre and WorkCentre Pro before 12.0

WorkCentre | before | Xerox | Pro |

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a "Validate Repository SSL Certificate" scan, which has unknown impact and attack vectors, possibly related to spoofed certificates.


SQL injection vulnerability in viewcat.php in t

vulnerability | viewcatphp | Repository | attackers | arbitrary | injection | parameter | commands | execute | module | allows | remote | Xoops | SQL | cid | via |

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter.


Unspecified vulnerability in the Default Messag

vulnerability | Application | Unspecified | WebSphere | Component | Messaging | Default | Server | IBM |

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."


Directory traversal vulnerability in Subversion

vulnerability | Subversion | Directory | traversal | before |

Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote authenticated users to overwrite and create arbitrary files via a ..\ (dot dot backslash) sequence in the filename, as stored in the file repository.


HP System Management Homepage (SMH) for Windows

Management | Homepage | System |

HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for OpenSSL.


Software vulnerabilities results 1 to 18 of 18     
Page: 1