[SECURITY] [DSA 3249-2] jqueryui security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3249-2 [email protected] http://www.debian.org/security/ Sebastien Delafond June 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3249-2] jqueryui security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3249-2 [email protected] http://www.debian.org/security/ Sebastien Delafond June 02, 2015 http://www.debian.org/security/faq -...

Multiple Cross-Site Scripting Vulnerabilities in Pimcore userClassController.php

Pimcore is a purely object-oriented system based on the Zend Framework, written in PHP 5. The exportClassAction and exportCustomLayOutDefinitionAction functions in the Pimcore userClassController.php script fail to properly handle the 'id' GET parameter, allowing remote attackers to exploit...

The vulnerability of the MySQL database management system allows a remote attacker to cause a service failure.

The vulnerability of the MySQL database management system allows a malicious actor, who operates remotely and has completed the authentication process, to compromise data accessibility by using the DDL subcomponent...

The vulnerability of the MySQL database management system allows a remote attacker to cause a service failure.

The vulnerability of the MySQL database management system allows a malicious actor, who operates remotely and has completed the authentication process, to compromise data accessibility by using the DDL subcomponent...

CVE-2015-1889

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...

Design/Logic Flaw

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...

Unspecified Vulnerability in Oracle MySQL Server Server:DDL Subcomponent

Oracle MySQL Server is an open source relational database management system. A security vulnerability exists in the Server:DDL subcomponent of Oracle MySQL Server, which can be exploited by remote attackers to conduct denial of service attacks...

Commix - Automated All-in-One OS Command Injection and Exploitation Tool

Commix short for command injection exploiter has a simple environment and it can be used, from web developers, penetration testers or even security researchers to test web applications with the view to find bugs, errors or vulnerabilities related to command injection attacks. By using this tool, ...

PT-2015-1110 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.41 and earlier Oracle MySQL Server versions 5.6.22 and earlier Description: The issue allows remote authenticated users to affect availability via vectors related to DDL, which is a subcomponent of the databas...

mysql: unspecified vulnerability related to Server:DDL (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-00625)

MySQL is an open source relational database management system. A security vulnerability exists in the Server : DDL subcomponent of Oracle MySQL, which allows remote attackers to exploit the vulnerability to affect the availability of the system...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-00622)

MySQL is an open source relational database management system. A security vulnerability exists in the Server : InnoDB : DDL : Foreign Key subcomponent of Oracle MySQL that could be exploited by remote attackers to affect the availability of the system...

CVE-2015-0391

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL...

CVE-2014-8006

The Disaster Recovery DRA feature on the Cisco ISB8320-E High-Definition IP-Only DVR allows remote attackers to bypass authentication by establishing a TELNET session during a recovery boot, aka Bug ID CSCup85422...

mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL...

mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL...

mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL...

Java: Java XML Signature DoS Attack

It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions DTDs to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial ...

Framework: Information disclosure via SSRF

It was found that the Spring Framework did not, by default, disable the resolution of URI references in a DTD declaration when processing user-provided XML documents. By observing differences in response times, an attacker could identify valid IP addresses on the internal network with functioning...