CVE-2016-7490

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

CVE-2016-7490

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

CVE-2016-7490

The CVE concerns Teradata Studio Express 15.12.00.00, where the installation script studioexpressinstall insecurely creates files under /tmp. A local attacker could place a symlink in /tmp and potentially clobber system files or escalate privileges. Technical details in related records confirm th...

CVE-2016-7490

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

CVE-2016-7490: Improper Link Resolution Before File Access

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

PT-2016-7349

Name of the Vulnerable Software and Affected Versions Teradata Studio Express version 15.12.00.00 Description The issue arises from the insecure creation of files in the /tmp directory by the installation script studioexpressinstall. This could allow a malicious local user to create a symlink in...

americanexpress.com XSS vulnerability

Vulnerable URL: https://www.americanexpress.com/uk/visitamsterdam/travel/en/assets/amsterdamtravelcast.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 13.02.2017 Latest check for patch:| 13.02.2017 14:07 GMT Vulnerability type:| XSS Vulnerability...

SOL01471335 - BIND vulnerability CVE-2016-2848

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

personalsavings.americanexpress.com XSS vulnerability

Vulnerable URL: https://personalsavings.americanexpress.com/application/app/nao?intlink=X"...

Oracle Fixes 253 Vulnerabilities in Last CPU of 2016

Oracle fixed 253 vulnerabilities across 76 product lines on Tuesday as part of its quarterly Critical Patch Update. Many of the fixes addressed by Oracle tackled vulnerabilities tied to securing critical enterprise data. Vulnerabilities in Oracle Fusion Middleware, a family of infrastructure...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability

Cisco Unified Contact Center Express Unified CCX and Cisco Unified Intelligence Center CUIC are both products of Cisco, Inc. Unified CCX is a customer relationship management component of a unified communications solution; CUIC is a web-based reporting platform. Unified CCX is a customer...

Advance MLM Script - SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : Advance MLM Script SQL Vulnerabilities | Software : Advance MLM Script | Vendor :...

CVE-2016-6427

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuy75036 and CSCuy81654...

CVE-2016-6425

Cross-site scripting XSS vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020 and CSCuy81652...

CVE-2016-6425

Cross-site scripting XSS vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020 and CSCuy81652...

CVE-2016-6427

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuy75036 and CSCuy81654...

CVE-2016-6425

Cisco CUIC is affected by a cross-site scripting (XSS) vulnerability in CUIC versions 8.5.4 through 9.1(1) when used with Unified CCX 10.0(1) through 11.0(1). The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, due to insufficient input validation. Cisco’s ...

PT-2016-6901

Name of the Vulnerable Software and Affected Versions Cisco Unified Intelligence Center CUIC versions 8.5.4 through 9.11 Unified Contact Center Express versions 10.01 through 11.01 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrar...

PT-2016-6899

Name of the Vulnerable Software and Affected Versions Cisco Unified Intelligence Center CUIC versions 8.5.4 through 9.11 Unified Contact Center Express versions 10.01 through 11.01 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a...

CVE-2016-6427: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuy75036 and CSCuy81654...