Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

OSIsoft PI SQL Data Access Server Input Validation Vulnerability

OVERVIEW OSIsoft has identified an input validation vulnerability in its own PI SQL Data Access Server. OSIsoft has produced a new version of PI SQL Data Access Server OLE DB 2016 1.5 to address this issue. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Affected versions of PI...

Mail.ru: By pass admin panel [seminars.mail.ru]

An partial information from seminars.mail.ru could be obtained due to invalid access restrictions seminars.mail.ru is not in Bug Bounty scope, but some reward was issued due to problem significance...

WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities

WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin...

The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption

The vulnerability of Solaris Kernel Zones, a component of the Solaris operating system, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to cause partial service disruption...

The vulnerability of the MySQL database management system allows a hacker to cause partial service interruptions.

The vulnerability of the InnoDB sub-component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial service interruptions through network packets...

The vulnerability of the Oracle Database database management system allows a hacker to cause a partial service outage.

The vulnerability of the XDB component—the XML Database component of the Oracle Database management system—is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through network packets...

The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption

The vulnerability of the Solaris operating system’s RPC subsystem is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial service interruptions by invoking remote procedures...

The vulnerability of the Solaris operating system, which allows a hacker to modify data or cause partial service failure.

The vulnerability of the Libc library component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to modify, add, or delete data, or cause partial service interruption...

The vulnerability of the Oracle Database database management system allows a hacker to cause a partial service outage.

The vulnerability of the XML Developer’s Kit component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker to cause a partial service failure through HTTP requests via Java Web Start applications or Java applets...

The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption

The vulnerability of the Boot subcomponent of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow a local attacker to cause a partial service failure...

Vulnerability of Jrockit and Java Platform software platforms, which allow attackers to cause partial service interruptions

The vulnerability of the JAXP sub-component in JRockit and Java Platform-related software platforms is associated with errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through network packets via the Java Web Start...

Oracle Solaris Critical Patch Update : jan2016_SRU11_3_3_6_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Libc Library. The supported version that is affected is 11. Difficult to exploit vulnerability requiring logon to...

PT-2016-1071

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris 11 Description The issue is related to errors in the code of the Libc Library component of the Solaris operating system. It may allow a local attacker to modify, add, or delete data, or cause a partial denial of service. The...

PT-2016-1077

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue is related to errors in the code of the Solaris Kernel Zones component of the Solaris operating system. It allows a local user to affect confidentiality and availability. Exploitation of the...

PT-2016-1090

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris 11 affected versions not specified Description The issue is related to an unspecified vulnerability in the Kernel Cryptography component of the Solaris operating system. This vulnerability is associated with coding errors...

PT-2016-1066

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 12.1.0.2 Description The issue is related to an unspecified vulnerability in the XML Developer's Kit for C component, which can be exploited by remote authenticated users to affect availability...

PT-2016-1095

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 10 and 11 Description The issue is related to errors in the code of the RPC subcomponent in the Solaris operating system. It allows remote attackers to affect availability via vectors related to RPC, potentially...

PT-2016-1085

Name of the Vulnerable Software and Affected Versions Java SE versions 6u105, 7u91, and 8u66 Java SE Embedded version 8u65 JRockit version R28.3.8 Description The issue is related to errors in the code of the JAXP subcomponent in Jrockit and Java Platform, allowing a remote attacker to cause...

Authentication Weakness

Overview Versions of keystone prior to 0.3.16 are affected by a partial authentication bypass vulnerability. In the default sign in functionality, if an attacker provides a full and correct password, yet only provides part of the associated email address, authentication will be granted...