IBM Cognos 11.0 Content Spoofing

/ Content Spoofing Vulnerability in IBM Cognos Analytics Applications Advisory 5190 Patch Release - 30 May 2016 Public Release - 03 June 2016 CVE-2016-0398 The IBM Security Bulletins associated with this CVE have been published at the following URLs: IBM Cognos Analytics 11.0...

Oracle: Security Advisory (ELSA-2010-0398)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0398

Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Clinical Trip Report...

CVE-2015-0398

Oracle Siebel CRM 8.1.1/8.2.2 are affected by CVE-2015-0398 in the Siebel Life Sciences component (Clinical Trip Report). The Nessus entry notes an easily exploitable vulnerability allowing authenticated network access via HTTP, resulting in unauthorized read access to a subset of data. Affected ...

Oracle Solaris Critical Patch Update : july2013_SRU0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Utility/Remote Execution Serverin.rexecd. Supported versions that are affected are 8, 9, 10 and 11. Easily...

CVE-2014-0398

CVE-2014-0398 concerns Oracle E‑Business Suite’s Oracle Application Object Library in versions 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2. The vulnerability is described as unspecified, allowing remote attackers to affect confidentiality via unknown vectors related to Discoverer; no exploitation detai...

CVE-2013-0398

CVE-2013-0398 affects Oracle Solaris 8–11 with a vulnerability in the Utility/Remote Execution Server (in.rexecd). The issue allows unauthenticated remote attackers to read data via network access, leveraging the Rexecd component. Nessus entries for Solaris 10 SPARC/x86 (148975-01, 148976-01) and...

Oracle Linux 5 : kernel (ELSA-2010-0398)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0398 advisory. - xen arpl on MMIO area crashes the guest Paolo Bonzini 572979 572982 CVE-2010-0730 - misc kernel: fix elf load DoS on x8664 Danny Feng 560552 560553...

Scientific Linux Security Update : gstreamer-plugins on SL3.x, SL4.x i386/x86_64

An array indexing error was found in the GStreamer's QuickTime media file format decoding plug-in. An attacker could create a carefully-crafted QuickTime media .mov file that would cause an application using GStreamer to crash or, potentially, execute arbitrary code if played by a victim...

ESA-2012-012: EMC Documentum eRoom Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-012: EMC Documentum eRoom multiple vulnerabilities EMC Identifier: ESA-2012-012 CVE Identifiers: CVE-2012-0398, CVE-2012-0404 Severity Rating: CVE-2012-0398 : CVSS Base Score is 5.8 AV:A/AC:L/Au:N/C:P/I:P/A:P CVE-2012-0404 : CVSS Base Score i...

CVE-2012-0398

CVE-2012-0398 affects EMC Documentum eRoom prior to 7.4.4. The flaw involves improper validation of session cookies, enabling remote attackers to hijack or replay user sessions via unspecified vectors. EMC’s advisory/esg127683 recommends upgrading to eRoom 7.4.4 to remediate. Other connected sour...

CentOS Update for seamonkey CESA-2009:0398 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for seamonkey CESA-2009:0398-01 centos2 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for gstreamer-plugins CESA-2009:0269 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-0398

The PiwikCommon::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via 1 use of a private aka RFC 1918 address behind a proxy server or 2 spoofing of the X-Forwarded-For HTTP...

CVE-2011-0398

CVE-2011-0398 affects Piwik before version 1.1. The vulnerability is in the Piwik_Common::getIP function, which does not correctly determine the client IP address. This can allow remote attackers to bypass geolocation restrictions and logging by either: using a private (RFC 1918) address behind a...

FreeBSD : neon date parsing vulnerability (8d075001-a9ce-11d8-9c6d-0020ed76ef5a)

Stefan Esser reports : A vulnerability within a libneon date parsing function could cause a heap overflow which could lead to remote code execution, depending on the application using libneon. The vulnerability is in the function nerfc1036parse, which is in turn used by the function...

Mandrake Security Advisory MDVSA-2009:086 (gstreamer-plugins)

The remote host is missing an update to gstreamer-plugins announced via advisory MDVSA-2009:086. OpenVAS Vulnerability Test $Id: mdksa2009086.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:086 gstreamer-plugins Authors: Thomas Reinke Copyright:...

CentOS Security Advisory CESA-2009:0398 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:0398. CESA-2009:0398 63754 4 $Id: ovcesa20090398.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0398 seamonkey Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CentOS Security Advisory CESA-2009:0398 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:0398. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...