Oracle Linux 5 : kernel (ELSA-2008-1017)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-1017 advisory. - drm i915 driver arbitrary ioremap Eugene Teo 464508 464509 CVE-2008-3831 - fs don't allow splice to files opened with OAPPEND Eugene Teo 466709 46671...

Oracle Linux 5 : kernel (ELSA-2009-1670)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1670 advisory. - nfs v4: fix setting lock on open file with no state Jeff Layton 533114 533115 CVE-2009-3726 - drm r128: check for init on all ioctls that require it...

Veeam Explorer for SharePoint - Item Restore Fails Due to SQL Express Database Size Limitation

Challenge When performing a SharePoint item restore using Veeam Explore for Microsoft Sharepoint, the following error occurs: CREATE DATABASE or ALTER DATABASE failed because the resulting cumulative database size would exceed your licensed limit of 10240 MB per database or CREATE DATABASE or ALT...

CVE-2013-1214

The scripts editor in Cisco Unified Contact Center Express aka Unified CCX does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546...

CVE-2013-1214

The scripts editor in Cisco Unified Contact Center Express aka Unified CCX does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546...

CVE-2013-1214

CVE-2013-1214 affects the Cisco Unified Contact Center Express (Unified CCX) scripts editor. The issue is improper privilege management for anonymous logins, allowing remote attackers to read arbitrary scripts by browsing the scripts repository directory. This is an unauthenticated access concern...

PT-2013-2977

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express affected versions not specified Description The issue concerns improper privilege management for anonymous logins in the scripts editor. This allows remote attackers to read arbitrary scripts by visiting th...

CVE-2013-1214: Undefined Security Weakness

The scripts editor in Cisco Unified Contact Center Express aka Unified CCX does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546...

Cisco Unified Contact Center Express Editor Information Disclosure Vulnerability

A vulnerability in the scripts editor software of the Cisco Unified Contact Center Express Cisco Unified CCX could allow an unauthenticated, remote attacker to have read access to scripts that are stored in the Cisco Unified CCX scripts repository. The vulnerability is due to improper privilege...

CVE-2013-1519

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2013-1519: Undefined Security Weakness

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect integrity via unknown vectors...

Pwn Pad Android device, Network hacking machine launched

Security tools company Pwnie Express is making a network hacking focused Android device called the Pwn Pad. The device is based on the Google Nexus 7 specs, with USB-based Bluetooth, Ethernet and WiFi to gauge the security of a network beyond what Google's tablet can manage on its own. Pwn Pad wi...

Pwn Pad Android device, Network hacking machine launched

Security tools company Pwnie Express is making a network hacking focused Android device called the Pwn Pad. The device is based on the Google Nexus 7 specs, with USB-based Bluetooth, Ethernet and WiFi to gauge the security of a network beyond what Google's tablet can manage on its own. Pwn Pad wi...

Oracle Application Express (Apex) CVE-2012-1708

An unspecified vulnerability in versions 4.0 and 4.1 of the Application Express Apex component of the Oracle Database Server allows remote attackers to affect integrity via unpublished vectors. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012...

Oracle Application Express (Apex) Version Detection

The remote host is running Oracle Application Express Apex. -------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Detect Oracle Application Express Version on Apex/HTTP ports Version 1.0...

Oracle Application Express (Apex) Unspecified Issues (pre 2.2.1)

There are unspecified vulnerabilities in versions prior to version 2.2.1 of the Oracle Application Express component of the Oracle Database. The updated version of Apex contains '35 new security fixes for Oracle Application Express, 25 of which may be remotely exploitable without authentication'...

Oracle Application Express (Apex) Administration Interface is Accessible

In production environments, the Apex Administration and Builder applications should be disabled to prevent administrator or developer access to the instance via a web browser. ------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Look for...

Oracle Application Express (Apex) CVE-2008-4005

An unspecified vulnerability in the Oracle Application Express component of Oracle Database version 11.1.0.6 allows remote, authenticated users to affect confidentiality, integrity, and availability via unpublished vectors...

Oracle Application Express (Apex) Unspecified Issues (pre 3.1)

There are unspecified vulnerabilities in the Application Express component of the Oracle Database. The updated version 3.1 contains two security fixes for vulnerabilities of which one is remotely exploitable without authentication...