2 results (0.002 seconds)

CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 1

10 Feb 2014 — obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate. obby (también conocido como libobby) no verifica certificados de servidor SSL, lo que permite a atacantes remotos falsificar servidores a través de un certificado arbitrario. • http://www.openwall.com/lists/oss-security/2011/10/30/5 • CWE-20: Improper Input Validation •

CVSS: 7.0EPSS: 0%CPEs: 9EXPL: 0

18 Sep 2013 — language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. language-selector 0.110.x anterior a la versión 0.110.1, 0.90.x anterior a 0.90.1 y 0.79.x anterior a la versión 9.79.4 no utiliza adecuadament... • http://secunia.com/advisories/54911 • CWE-264: Permissions, Privileges, and Access Controls •