6587 matches found
Avaya IP Office Customer Call Reporter code execution
It's possible to upload executable files via ImageUpload.ashx...
Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities
Document Title: =============== Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=631 Release Date: ============= 2012-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 6...
CVE-2012-3811
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an...
CVE-2012-3811
CVE-2012-3811 affects Avaya IP Office Customer Call Reporter (CCR) ImageUpload.ashx, where an unrestricted file upload allows remote code execution by uploading an executable and accessing it directly. Affected: CCR 7.0 up to 7.0.5.8 Q1 2012 Maintenance Release and 8.0 up to 8.0.9.13 Q1 2012 Main...
CVE-2012-3811
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an...
Avaya IP Office Customer Call Reporter ImageUpload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Avaya IP Office Customer Call Reporter. Authentication is not required to exploit this vulnerability. The specific flaw exists because Avaya IP Office Customer Call Reporter allows unauthenticated...
FTC Sues Wyndham Over Breaches Linked to $10m In Fraud
UPDATE: The U.S. Federal Trade Commission has fined Wyndham Hotels for a string of data breaches that resulted in information on hundreds of thousands of customers being lost to cyber criminals. An FTC complaint, filed on June 26, 2012, asks for “permanent injunctive relief” against Wyndham for...
Important: Red Hat Security Advisory: jbossas security update
An update for JBoss Enterprise Application Platform 4.3.0 CP10 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, whic...
Moderate: Red Hat Security Advisory: jbossas security update
An update for JBoss Enterprise Web Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Moderate: Red Hat Security Advisory: jbossas security update
An update for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which give...
Moderate: Red Hat Security Advisory: mod_cluster security update
An update for JBoss Enterprise Web Server 1.0.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detail...
Moderate: Red Hat Security Advisory: mod_cluster security update
An update for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which give...
[SECURITY] Fedora 15 Update: rubygem-activerecord-3.0.5-3.fc15
Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...
Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities
Document Title: =============== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=614 Release Date: ============= 2012-06-13 Vulnerability Laboratory ID VL-ID: ==================================...
Survey Shows 85 Percent of Small Business Owners Convinced a Data Breach Unlikely
If a newly released survey is any indication, publicized data breaches aren’t enough to prompt small businesses to better protect their customer or employee data. A survey released this week by The Hartford found 85 percent of small business owners believe a data breach is unlikely and often lack...
Jabong.com Cross Site Scripting
Website: www.jabong.com Vulnerability: Session Hijacking VIA XSS Criticality: Moderate to Risky Author: Karthik R a.k.a 3psil0nlambda www.epsilonlambda.wordpress.org --------------------------------------------------- About the site: Jabong.com is a young and vibrant company that aims to provide...
Interspire Shopping Cart v6 - Multiple Web Vulnerabilities
Document Title: =============== Interspire Shopping Cart v6 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=593 Release Date: ============= 2012-06-02 Vulnerability Laboratory ID VL-ID: ====================================...
December 2011 – Square Enix / Trion Worlds
Two minor data breaches affected video game developers Square Enix Final Fantasy and Trion Worlds Rift late last year, allegedly spilling sensitive information from the company’s servers. The attack against Square Enix hit 1.8 million users – mostly North American and Japanese customers who signe...
November 2011 – Steam Hack
Steam, an online distribution network that hosts countless video game catalogs struck down in November last year after a hacker was able to bypass the site’s message boards and databases. The hackers leaked 35 million customers’ information, including encrypted passwords, game purchases, email...
Genium CMS 2012Q2 - Multiple Vulnerabilities
Genium CMS 2012Q2 - Multiple Vulnerabilities Title: ====== Genium CMS 2012|Q2 - Multiple Web Vulnerabilities Date: ===== 2012-05-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=517 VL-ID: ===== 517 Introduction: ============= Durch den Einsatz von Genium CMS können S...