PT-2016-3156

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite Solaris versions 10 and 11 Description The issue is related to inadequate access control in the CDE Calendar subcomponent of the Solaris operating system. It allows an unauthenticated attacker with network...

Solaris 7/8/9 CDE libDtHelp - Buffer Overflow dtprintinfo Privilege Escalation Exploit

Exploit for linux platform in category local exploits / $Id: raptorlibdthelp.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorlibdthelp.c - libDtHelp.so local, Solaris/SPARC 7/8/9 Copyright c 2003-2004 Marco Ivaldi Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary cod...

Solaris 7/8/9 CDE libDtHelp - Buffer Overflow Non-Exec Stack Privilege Escalation Exploit

Exploit for linux platform in category local exploits...

Oracle: Security Advisory (ELSA-2010-0112)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PCI DSS version 3.1 released!

As expected, a "minor" revision to the PCI DSS 3.0 standard now version 3.1 was released by the PCI SSC today to address the vulnerabilities exposed by the POODLE and BEAST browser attacks. PCI DSS 3.1 primarily addresses the insecure use of SSL as an encryption protocol within a Cardholder Data...

CVE-2014-6521

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility...

CVE-2014-6521

CVE-2014-6521 affects Oracle Solaris 10, specifically the CDE - Power Management Utility. The Solaris 10 component is vulnerable to a local, easily exploitable flaw that can lead to complete compromise of confidentiality, integrity, and availability (arbitrary code execution). Patches addressing ...

CVE-2014-6521

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility...

PT-2015-3865

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 10 Description The issue affects confidentiality, integrity, and availability. It is related to vectors in the CDE - Power Management Utility. Recommendations For Oracle Solaris version 10, at the moment, there is no...

CVE-2014-6521: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility...

Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00489)

Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris. This vulnerability allows attackers to exploit the 'CDE - Power Management Utility' subcomponent...

IBM DB2 10.5 < Fix Pack 4 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.5 running on the remote host is affected by the following vulnerabilities : - An error exists related to JavaScript Object Notation JSON-C handling, string parsing, and the hash function that allows denial of service attacks. CVE-2013-6371 ...

CVE-2014-4805

IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring...

CVE-2014-4805

IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring...

CVE-2014-4805

IBM DB2 10.5 before FP4 on Linux and AIX is affected by CVE-2014-4805. During LOAD into Columnar Data Engine (CDE) tables, DB2 may create a temporary file containing user data that exists only for the duration of the LOAD operation and is removed on completion, enabling local disclosure of data. ...

PT-2014-6125

Name of the Vulnerable Software and Affected Versions IBM DB2 version 10.5 before FP4 Description The issue allows local users to obtain sensitive information by reading a file while a LOAD operation is occurring during CDE table LOAD operations. This is due to the creation of temporary files...

CVE-2014-4805: Exposure of Sensitive Information to an Unauthorized Actor

IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring...

Hitron Technologies CDE-30364 Denial Of Service

!/usr/bin/python ----------------------------------------------------------------------------------------- Description: ----------------------------------------------------------------------------------------- Hitron Technologies CDE-30364 is a famous ONO Router. Scanning certain sensitive urls t...

Xi Graphics Maximum CDE 1.2.3,TriTeal TED CDE 4.3,Sun Solaris <= 2.5.1 ToolTalk RPC Service Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/122/info An implementation fault in the ToolTalk object database server allows a remote attacker to run arbitrary code as the superuser on hosts supporting the ToolTalk service. The affected program runs on many popular...