ESA-2015-109: EMC Documentum D2 Cross-Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-109: EMC Documentum D2 Cross-Site Scripting Vulnerability EMC Identifier: ESA-2015-109 CVE Identifier: CVE-2015-0549 Severity Rating: CVSS v2 Base Score: 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P Affected products: EMC Documentum D2 version 4.1 EMC...

CVE-2015-0989

PACTware 4.1 SP3 allows remote attackers to cause a denial of service application crash via a crafted file that triggers an internal error...

Code injection

PACTware 4.1 SP3 allows remote attackers to cause a denial of service application crash via a crafted file that triggers an internal error...

ESA-2015-106: EMC Unified Infrastructure Manager/Provisioning (UIM/P) Authentication Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-106: EMC Unified Infrastructure Manager/Provisioning UIM/P Authentication Bypass Vulnerability EMC Identifier: ESA-2015-106 CVE Identifier: CVE-2015-0546 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C Affected products: ...

CVE-2015-0546

EMC Unified Infrastructure Manager/Provisioning UIM/P 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name...

Updated phpmyadmin packages fix security vulnerabilities

Updated phpmyadmin package fixes security vulnerabilities: In phpMyAdmin before 4.2.13.3, by deceiving a user to click on a crafted URL, it is possible to alter the configuration file being generated with phpMyAdmin setup CVE-2015-3902. In phpMyAdmin before 4.2.13.3, a vulnerability in the API ca...

eyou 4.1 /sysinfo.html 信息泄漏漏洞

No description provided by source...

Samba 4.x < 4.0.21 / 4.1.x < 4.1.11 nmbd Remote Code Execution

Binary data 8759.prm...

Unspecified Vulnerability in Apple OS X Server Firewall Component

Apple OS X Server is a set of Unix-based server operating software from the U.S. company Apple Apple. The software enables file sharing, meeting scheduling, web hosting, network remote access, etc. Firewall is one of the firewall components. A security vulnerability exists in the Firewall compone...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the accessibility of protected information

The fileutils-4.1 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2015-0201

The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors...

SolarWinds VoIP and Network Quality Manager (VNQM) < 4.2 Multiple SQLi Vulnerabilities

SolarWinds VoIP and Network Quality Manager VNQM is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

DSA-3139-1 squid - security update

Bulletin has no description...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Subject or 2 Message field...

CVE-2014-100013

Multiple cross-site scripting XSS vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Subject or 2 Message field...

CVE-2014-100013

CVE-2014-100013 affects clientResponse 4.1 with multiple XSS vulnerabilities that permit remote execution of arbitrary web script/HTML via the Subject or Message fields. The vulnerability stems from improper input handling in these fields, enabling injected code to run in the context of the victi...

CVE-2014-9387

SAP BusinessObjects Edge 4.1 is affected by CVE-2014-9387 through a crafted CORBA call that allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN and escalate privileges. The underlying cause is exposure of a login token via CORBA, enabling complete confidentiality, integrit...

phpMyAdmin 4.0.x/4.1.x/4.2.x - Denial of Service

============= DESCRIPTION: ============= A vulnerability present in in phpMyAdmin 4.0.x before 4.0.10.7, 4.1. x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service resource consumption via a long password. CVE-2014-9218 was assigned ============= Time...

phpMyAdmin 4.0.x < 4.0.10.7 / 4.1.x < 4.1.14.8 / 4.2.x < 4.2.13.1 Multiple Vulnerabilities (PMASA-2014-17 - PMASA-2014-18)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.7, 4.1.x prior to 4.1.14.8, or 4.2.x prior to 4.2.13.1. It is, therefore, affected by the following vulnerabilities : - A flaw exists in handling overly long password...

CVE-2014-8960

Cross-site scripting XSS vulnerability in libraries/errorreport.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename...