Ipsilon Denial of Service Vulnerability

Ipsilon is a server and toolkit for configuring Apache-based service providers. A denial of service vulnerability exists in Ipsilon version 0.1.0 prior to 1.0.1. It allows an authenticated remote user to cause a denial of service via a duplicate SP name...

Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT Management Center

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. Multiple...

Cisco Secure Access Control Server SQL Injection Vulnerability

Cisco Secure Access Control Server that is ACS, is the United States Cisco Cisco a security access control server. A SQL injection vulnerability exists in Cisco Secure Access Control Server 5.7. It allows an authenticated remote user to execute arbitrary SQL commands via a crafted URL...

Cisco Adaptive Security Appliance CX Context-Aware Security Information Disclosure Vulnerability

The Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software is an add-on service module for extending the ASA platform from Cisco USA. An information disclosure vulnerability exists in Cisco Adaptive Security Appliance CX Context-Aware Security 9.3. It allows an authenticated...

TIBCO Spotfire Server Information Disclosure Vulnerability (CNVD-2015-07300)

TIBCO Spotfire Analyst Platform for AWS Marketplace is a suite of data visualization and analytics platforms for AWS, the cloud application store, from TIBCO Software, USA. Versions 5.5.x prior to 5.5.4, 6.0.x prior to 6.0.5, 6.5.x prior to 6.5.4, 7.0.x prior to 7.0.1 of TIBCO Spotfire Server,...

Infinite Automation Mango Automation Arbitrary Command Execution Vulnerability

Infinite Automation Mango Automation is the United States Infinite Automation Systems, Inc. of a set of open source Web-based SCADA data acquisition and supervisory control, HMI and automation software. Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430, has an arbitrary...

Vtiger CRM Authenticated Remote Code Execution (CVE-2015-6000)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vtiger CRM Authenticated Remote Code Execution CVE-2015-6000 http://b.fl7.de/2015/09/vtiger-crm-authenticated-rce-cve-2015-6000.html 1. Summary 2. Vulnerability Details 3. Exploitation / Proof of Concept 4. Timeline 5. See Also 1. Summary Vtiger CRM...

Unspecified Vulnerability in Oracle PeopleSoft Products (CNVD-2015-06957)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle. An unspecified vulnerability exists in Oracle PeopleSoft Products 9.2. It allows an authenticated remote user to impact confidentiality and integrity related to the collection and management of...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06824)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.45 and earlier and 5.6.26 and earlier. ...

Unspecified Vulnerability in Oracle PeopleSoft Products (CNVD-2015-06959)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle. An unspecified vulnerability exists in Oracle PeopleSoft Products 9.2. It allows an authenticated remote user to affect confidentiality, integrity, and availability via unspecified vectors related ...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06843)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.45 and earlier, 5.6.26 and earlier...

Unspecified Vulnerability in Oracle Supply Chain Products Suite (CNVD-2015-06969)

Oracle Supply Chain Products Suite is the United States Oracle Oracle, Inc. of a global supply chain business to plan, manage and optimize the fully integrated system. An unspecified vulnerability exists in Oracle Supply Chain Products Suite 9.3.4. Allowing an authenticated remote user to...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06983)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.45 and earlier and 5.6.26 and earlier. ...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2015-06833)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An unspecified vulnerability exists in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, 12.2.4. Allows an authenticated remote user to affect confidentiality and integrity via vectors...

Unspecified Vulnerability in Oracle Supply Chain Products Suite

Oracle Supply Chain Products Suite is the United States Oracle Oracle, Inc. of a global supply chain business to plan, manage and optimize the fully integrated system. An unspecified vulnerability exists in Oracle Supply Chain Products Suite 9.3.4. Allowing an authenticated remote user to pass...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06846)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server 5.6.23 and earlier versions. Allows an authenticated...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06979)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.45 and earlier and 5.6.26 and earlier. ...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06818)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.44 and earlier, 5.6.25 and earlier...

Unspecified Vulnerability in Oracle PeopleSoft Products (CNVD-2015-06953)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle. An unspecified vulnerability exists in Oracle PeopleSoft Products 9.2. It allows an authenticated remote user to affect confidentiality via unspecified vectors related to security...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06976)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL 5.6.20 and earlier versions. It allows an authenticated...