1067 matches found
Important: Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update
Updated the following packages to fix several bugs in Red Hat Satellite 6: foreman, foreman-compute, foreman-gce, foreman-libvirt, foreman-ovirt, foreman-postgresql, foreman-vmware and ruby193-rubygem-katello packages. These packages are now available in Red Hat Satellite 6. Red Hat Satellite is ...
[oCERT-2014-004] Ansible input sanitization errors
2014-004 Ansible input sanitization errors Description: The Ansible project is an open source configuration management platform. The Ansible platform suffers from input sanitization errors that allow arbitrary code execution as well as information leak, in case an attacker is able to control...
Critical: Red Hat Enhancement Advisory: Release of Satellite 6.0
Red Hat Satellite 6.0 is now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without necessity to provide public Internet access to their servers or other client systems. It also performs provisioning and configuration...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IBM Configuration Management Application aka VVC in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x before 5.0.1, and Rational Rhapsody Design Manager...
CVE-2014-3037
CVE-2014-3037 is a CSRF vulnerability affecting IBM Configuration Management Application (VVC) used by IBM Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager, and Rational Rhapsody Design Manager. The flaw enables remote authenticated users to hijack another user’s...
CVE-2014-3037
Cross-site request forgery CSRF vulnerability in IBM Configuration Management Application aka VVC in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x before 5.0.1, and Rational Rhapsody Design Manager...
CVE-2014-3037: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IBM Configuration Management Application aka VVC in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x before 5.0.1, and Rational Rhapsody Design Manager...
ManageEngine DeviceExpert 5.9 - User Credential Disclosure
Exploit for php platform in category web applications User credential disclosure in ManageEngine DeviceExpert 5.9 Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Background on the affected product:...
[SECURITY] Fedora 20 Update: ansible-1.6.10-1.fc20
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
[SECURITY] Fedora 19 Update: ansible-1.6.10-1.fc19
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
[SECURITY] Fedora 19 Update: ansible-1.6.6-1.fc19
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
CVE-2014-2616
Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2091...
Novell ZENworks Configuration Management Remote Execution
No description provided by source. $Id: zenworksuploadservlet.rb 11099 2010-11-22 17:53:49Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Novell ZENworks Configuration Management Preboot Service 0x6c Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Novell ZENworks Configuration Management Preboot Service 0x21 Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Novell ZENworks Configuration Management Preboot Service 0x06 Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Visible Systems Razor 4.1 Password File Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or use those...
Cobbler 2.4.x - 2.6.x - LFI Vulnerability
No description provided by source. Exploit Title: Local File Inclusion vulnerability in cobbler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.cobblerd.org Affected Software version: 2.4.x - 2.6.x Alerted vendor: 7.5.14 Software Description =====================...
Visible Systems Razor 4.1 Password File Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or use those...
Novell ZENworks Configuration Management Preboot Service 0x4c Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...