CVE-2016-5072

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9, Professional Edition v4.8.12, Professional Edition v4.9.9, Community Edition v4.8.12, Community...

Teradata Virtual Machine Community Edition Elevation of Privilege Vulnerability

Teradata Virtual Machine Community Edition is a Teradata virtual container packaged with the SUSE Linux Enterprise Server SLES operating system and Teradata databases to run in a virtualized environment on third-party hardware. A security vulnerability exists in Teradata Virtual Machine Community...

Teradata Virtual Machine Community Edition 15.10 Insecure File Permission Vulnerability

Teradata Virtual Machine Community Edition version 15.10 suffers from an insecure file permission vulnerability. Title: Teradata Virtual Machine Community Edition v15.10 has insecure file permission Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01 Download Site:...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

Code injection

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10 is affected by an insecure file-creation flaw in the perl script /opt/teradata/gsctools/bin/t2a.pl, which creates temporary files in /tmp. The root cause is insecure handling of /tmp files, enabling a local user to inject/execute commands (e.g., b...

CVE-2016-7489: Undefined Security Weakness

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

CVE-2016-7488: Undefined Security Weakness

Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. These could allow a local user to modify its contents and execute commands as root...

PT-2016-7348

Name of the Vulnerable Software and Affected Versions Teradata Virtual Machine Community Edition version 15.10 Description The issue arises from the perl script /opt/teradata/gsctools/bin/t2a.pl in Teradata Virtual Machine Community Edition, which creates files in /tmp in an insecure manner. This...

Magento Community Edition < 1.9.3 Multiple Vulnerabilities

Binary data 8963.prm...

Magento Community Edition 2.x < 2.0.10 Multiple Vulnerabilities

Binary data 8964.prm...

Magento Community Edition 2.x Version Detection

Binary data 9691.prm...

Magento Community Edition < 1.9.2.2 Multiple Vulnerabilities

Binary data 9678.prm...

Magento Community Edition < 1.7.0.1 XXE Injection

Binary data 9675.prm...

Magento Community Edition Version Detection

Binary data 9674.prm...

Magento Community Edition Web Application Detection

Binary data 9673.prm...

Magento Community Edition < 1.9.2.3 Multiple Vulnerabilities

Binary data 9679.prm...

Magento Community Edition < 1.9.2.1 Multiple Vulnerabilities

Binary data 9677.prm...

Allfresco Community Edition: source code security analysis report

Several vulnerabilities were discovered in Alfresco Software 'Allfresco Community Edition' software: Утечка пользовательских данных между сессиями Использование XSL трансформации для исполнения произвольного кода Использование метода finalize Отсутствие верификации цифровой подписи исполняемых...