CVE-2014-4787: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4783: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2014-4784: Undefined Security Weakness

IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME elements, which allows remote attackers to conduct phishing attacks, and bypass intended access restrictions or obtain...

CVE-2014-4789: Session Fixation

Session fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers to hijack web sessions via unspecified vectors...

Backup Catalog Service does not start. Error "Can't upgrade database in readonly maintenance mode!"

Challenge This KB applies only if the "Veeam Backup Enterprise Manager" service is present. The "Veeam Backup Catalog Data Service" will not start, and the following error is found in event viewer. "Service cannot be started. Veeam.Backup.Common.CRegeneratedTraceException: Failed to start service...

PT-2013-1353 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 9.0 through 10 Description: The issue is related to the administrator.cfc component in Adobe ColdFusion, which allows remote attackers to bypass authentication and possibly execute arbitrary code. This is achieved by...

Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution(ms98-004)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require...

Microsoft IIS - MDAC 'msadcs.dll' RDS DataStub Content-Type Overflow (MS02-065) (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Microsoft IIS MDAC msadcs.dll RD...

Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflow(ms02-065)

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit...

Memory corruption

PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12299...

CVE-2012-0230

Affected software and component: GE Intelligent Platforms Proficy Plant Applications, specifically the Proficy Remote Data Service (PRRDS.exe) used by the suite, with default TCP port 12299. Root cause / vulnerability type: Memory corruption vulnerabilities in PRRDS.exe leading to potential remot...

CVE-2012-0230

PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12299...

CVE-2012-0230: Improper Restriction of Operations within the Bounds of a Memory Buffer

PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12299...

CSWorks LiveData Service vulnerable to denial-of-service (DoS)

Overview LiveData Service, a server component of CSWorks contains a denial-of-service DoS vulnerability. LiveData Service, a server component of CSWorks, contains an issue when processing TCP packets, which may lead to a denial-of-service DoS. Kuang-Chun Hung of Security Research and Service...

CVE-2011-2297

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server...

CVE-2011-2297

Technical details about CVE-2011-2297 are not publicly provided in the supplied documents. Monitor for updates from Oracle/CERT advisories for affected products and fixes.

CVE-2011-2297

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server...

CVE-2011-2297: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server...

Remote Data Service on InternetInformationServer (Windows)

The script detects if Remote Data Service installed on InternetInformationServer. OpenVAS Vulnerability Test $Id: GSHBWMIIISRDS.nasl 7061 2017-09-05 11:50:40Z teissa $ Remote Data Service on InternetInformationServer Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks...