[security bulletin] HPSBMA02549 SSRT090158 rev.1 - HP Insight Control Power Management for Windows, Local Unauthorized Access to Data, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02282361 Version: 1 HPSBMA02549 SSRT090158 rev.1 - HP Insight Control Power Management for Windows, Local Unauthorized Access to Data, Denial of Service DoS NOTICE: The information in this Securi...

CVE-2010-1966

HP Insight Control Power Management for Windows before version 6.1 contains a local access vulnerability that could allow reading or modifying data or causing a DoS via unknown vectors. The issue affects HP Insight Control Power Management on Windows installations prior to 6.1, with the root caus...

Debian DSA-1966-1 : horde3 - insufficient input sanitising

Several vulnerabilities have been found in horde3, the horde web application framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3237 It has been discovered that horde3 is prone to cross-site scripting attacks via crafted number preferences o...

Code injection

Unspecified vulnerability in the Config Management component in 1 Oracle Database 11.1.0.7 and 2 Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966...

CVE-2009-1966

CVE-2009-1966 affects Oracle Enterprise Manager 10.2.0.4 (and Oracle Database 11.1.0.7) in the Config Management component. The vulnerability is described as an unspecified issue that allows remote, authenticated users to affect confidentiality and integrity via unknown vectors; the Oracle CPU Ju...

CVE-2008-1966

CVE-2008-1966 affects IBM DB2: multiple buffer overflows in the BSU JAVA subcomponent’s JAR file administration routines. Vulnerable in DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1. The issue allows remote authenticated users to cause a denial of service (instance crash) by calling RECO...

CVE-2007-1966

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...

CVE-2007-1966

CVE-2007-1966 affects eXV2 CMS up to version 2.0.4.3. It describes a session fixation flaw that allows a remote attacker to hijack a user session by setting the PHPSESSID cookie. The impact is noted as high for confidentiality and integrity (no availability impact). No explicit exploit details or...

CVE-2006-1966

CVE-2006-1966 targets an unspecified Fortinet product (possibly Fortinet28) and describes a remote denial-of-service via a small synflood to SMTP (TCP 25). The underlying cause and affected version details are not provided in the documents. The note mentions dispute that a protection feature trig...

CVE-2002-1966

CVE-2002-1966 affects My Postcards Platinum 5.0 and 6.0, where a directory traversal bug in magiccard.cgi lets remote attackers read arbitrary files by providing a .. in the page parameter. This has been consistently described across multiple sources (Red Hat, CVE lists, NVD). The connected docum...

CVE-2005-1966

The CVE-2005-1966 issue affects the e107 content portal via the eTrace plugin: the eTrace_validaddr function allows remote attackers to run arbitrary commands by injecting shell metacharacters after a valid etrace_host argument. The NASL plug-in also describes a DOTRACE path where etrace_cmd/etra...

CVE-2004-1966

Open Bulletin Board (OpenBB) 1.0.6 and earlier contains multiple SQL injection flaws allowing remote SQL command execution via parameters: FID in board.php; sortorder, perpage, or id in member.php; forums in search.php; and PID or FID in post.php. Root cause is unvalidated input in these endpoint...