Unspecified Vulnerability in Oracle Retail Point-of-Service Mobile POS Component (CNVD-2016-00574)

Oracle Retail Applications is a suite of retail application store solutions. An unspecified vulnerability exists in the Oracle Retail Point-of-Service component, which could be exploited by a remote attacker to gain unauthorized access to data and cause an information disclosure...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00694)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

Unspecified Vulnerability in Oracle PeopleSoft PeopleTools File Processing Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability exists in the Oracle PeopleSoft PeopleTools File Processing component, which allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in the...

Unspecified Vulnerability in Oracle PeopleSoft PeopleTools Multichannel Framework Component (CNVD-2016-00495)

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability exists in the Oracle PeopleSoft PeopleTools Multichannel Framework component, which allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in th...

Oracle Supply Chain Configurator UI Servlet Component Data Access Vulnerability (CNVD-2016-00561)

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified vulnerability exists in the Oracle Supply Chain Configurator UI Servlet component, which allows remote attackers to...

Unspecified Vulnerability in Oracle Retail Point-of-Service Mobile POS Component (CNVD-2016-00577)

Oracle Retail Applications is a suite of retail application store solutions. An unspecified vulnerability exists in the Oracle Retail Point-of-Service component, which could be exploited by a remote attacker to gain unauthorized access to data and cause an information disclosure...

Intel Driver Update Utility Information Disclosure Vulnerability

Intel Driver Update Utility is a tool that analyzes the drivers of your computer system. Intel Driver Update Utility version 2.2.0.5 has a man-in-the-middle attack vulnerability in its implementation, which can be exploited to bypass the domain authentication method VerifyDownloadURL if an attack...

node. js remote memory disclosure vulnerability-vulnerability warning-the black bar safety net

Recently, in allows users to simply send a ping data frame to the allocated memory of the ws module found in the presence of the vulnerability. The vulnerability will reject a user request to send data, allowing users to send a ping data frame function failure, prior to that, it will also increas...

SUSE SLED11 / SLES11 Security Update : xfsprogs (SUSE-SU-2015:2383-1)

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 - Fix segfault during xfsrepair run bsc911866 - Fix definition of leaf attribute block to avoid gcc optimization xfsprogs-fix-leaf-block-definition No...

SUSE SLED12 / SLES12 Security Update : xfsprogs (SUSE-SU-2015:2384-1)

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2015:2383-1 Security update for xfsprogs

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 - Fix segfault during xfsrepair run bsc911866 - Fix definition of leaf attribute block to avoid gcc optimization xfsprogs-fix-leaf-block-definition...

SUSE-SU-2015:2384-1 Security update for xfsprogs

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150...

Firefox < 43 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 43. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues by convinci...

Cisco TelePresence Video Communication Server Information Disclosure Vulnerability

A vulnerability in the key management of Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, local attacker to read sensitive data. The vulnerability is due to an encryption key that is shared across all the installations of VCS. An attacker could exploit this...

FreeBSD : redmine -- information leak vulnerability (21bc4d71-9ed8-11e5-8f5c-002590263bf5)

Redmine reports : Data disclosure in atom feed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution and use in source VuXML...

FreeBSD : redmine -- multiple vulnerabilities (be63533c-9ed7-11e5-8f5c-002590263bf5)

Redmine reports : Potential changeset message disclosure in issues API. Data disclosure on the time logging form %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...

OpenMRS 2.3 (1.11.4) XML External Entity (XXE) Processing PoC Exploit

Summary OpenMRS is an application which enables design of a customized medical records system with no programming knowledge although medical and systems analysis knowledge is required. It is a common framework upon which medical informatics efforts in developing countries can be built. Descriptio...

redmine -- information leak vulnerability

Redmine reports: Data disclosure in atom feed...

UBUNTU-CVE-2015-8393

pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client...

Debian DLA-351-1 : redmine security update

It was discovered that there was a data disclosure vulnerability in Redmine, a web-based bug and project management tool. The time logging form could disclose subjects of issues that are not visible/public. Patch by Holger Just. For Debian 6 Squeeze, this issue has been fixed in redmine version...