128 matches found
CVE-2017-3573
The CVE-2017-3573 vulnerability affects Oracle Hospitality OPERA 5 Property Services, specifically the OPERA Printing subcomponent. Affected supported versions include 5.4.0.x–5.4.3.x and 5.5.0.x–5.5.1.x. The issue is exploitable by an unauthenticated attacker who can reach the service over HTTP ...
homes.com XSS vulnerability
Vulnerable URL: http://www.homes.com/for-sale/north-dakota/?givenCity=ASDF%27;%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%3C!-- Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:11 GMT Vulnerability type:| XSS Vulnerability...
CVE-2016-3573
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than...
Design/Logic Flaw
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than...
CVE-2016-3573
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than...
CVE-2016-3573
Technical details for CVE-2016-3573 are not publicly available in the provided documents. No affected products, versions, root cause, or remediation are specified here; monitor for updates.
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3573)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3573 advisory. kernel-uek 3.8.13-118.7.1 - megaraidsas : Update threshold based reply post host index register [email protected] Orabug: 23562756 - xen/events:...
Debian DSA-3573-1 : qemu - security update
Several vulnerabilities were discovered in qemu, a fast processor emulator. - CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this flaw to execute arbitrary code on the host with the...
RHEL 6 : Virtualization Manager (RHSA-2014:1161)
Red Hat Enterprise Virtualization Manager 3.4.2 is now available. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the References...
CVE-2014-3573
CVE-2014-3573 affects the oVirt Engine back end module used in Red Hat Enterprise Virtualization Manager prior to 3.4.2. The issue arises from an insecure DocumentBuilderFactory when loading XML/RSDL documents, enabling XML External Entity (XXE) attacks that could allow a remote attacker to read ...
openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0754-1)
Sun Java 1.6.0 was updated to Security Update U22. The release notes for this release are on: http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121. html Security advisory page for this update: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-17625 8.html Following...
openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)
Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...
Fedora 19 : rubygem-rbovirt-0.0.18-4.fc19 (2014-3573)
Fix unsafe use of rest-client CVE-2014-0036. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for rubygem-rbovirt FEDORA-2014-3573
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-3573
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2013-3573
HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors...
CVE-2013-3573
CVE-2013-3573 relates to HP Insight Diagnostics 9.4.0.4710. The connected sources confirm three related issues in the HP Insight Diagnostics web UI: (1) CVE-2013-3573 — Improper Neutralization of Special Elements in Output Used by a Downstream Component, an injection vulnerability in PHP code pat...
KLA10188 Multiple vulnerabilities in HP Insight Diagnostics
Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities 1. Improper PHP include restrictions can be exploited via a path parameter; 2. A path...
HP Insight Diagnostics 8.20 b2878 multiple vulnerabilities
Overview HP Insight Diagnostics 8.20 b2878 and possibly earlier versions contains multiple vulnerabilities. Description It has been reported that HP Insight Diagnostics 8.20 b2878 and possibly earlier versions contains multiple vulnerabilities that can be exploited by a remote attacker to execute...