PT-2016-4451

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Elastic Runtime versions 1.6.0 through 1.6.33 Pivotal Cloud Foundry PCF Elastic Runtime versions 1.7.0 through 1.7.11 Description The issue allows remote attackers to bypass intended network-connectivity restrictions ...

PT-2016-7013

Name of the Vulnerable Software and Affected Versions Cloud Foundry PHP Buildpack versions prior to 4.3.18 PHP Buildpack Cf-release versions prior to 242 Pivotal Cloud Foundry PCF Elastic Runtime versions prior to 1.6.38 Pivotal Cloud Foundry PCF Elastic Runtime versions 1.7.x prior to 1.7.19...

PT-2016-4479

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Elastic Runtime versions 1.6.0 through 1.6.32 Pivotal Cloud Foundry PCF Elastic Runtime versions 1.7.0 through 1.7.8 Description The issue is related to a cross-site scripting XSS vulnerability in the Apps Manager...

Pivotal Cloud Foundry Elastic Runtime Security Bypass Vulnerability

Pivotal Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. A security bypass...

Moderate: Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server

Red Hat Satellite 6.2 now available for Red Hat Enterprise Linux 6 and 7 Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs...

CVE-2016-0635

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

Open Source Security Incident and Event Management: SIEMonster

Open Source Security Incident and Event Management SIEMonster is free, documented open source Security Incident and Event Management SIEM designed and engineering with stable, supported open source products developed for security, scalability and functionality. The product was developed by...

Multiple Pivotal Product Security Bypass Vulnerabilities

Pivotal Cloud Foundry CF is a suite of open source Platform-as-a-Service PaaS cloud computing platforms from Pivotal Software in the United States, which provides container scheduling, continuous delivery, and automated service deployment. cf-release is a release of CF. Elastic Runtime is CF's...

Pivotal Cloud Foundry Elastic Runtime HTML Injection Vulnerability

Pivotal Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. An HTML injection...

Pivotal Cloud Foundry Elastic Runtime Open Redirect Vulnerability

Pivotal Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. An open redirection...

startupgreece.gov.gr XSS vulnerability

Vulnerable URL: http://startupgreece.gov.gr/elastic-search?searchapiviewsfulltext=%27%22/%3E%3E%3C/script%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Elastic Kibana Cross-site Request Forgery (CSRF) Vulnerability - Linux

Elastic Kibana is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana Cross-site scripting (XSS) Vulnerability - Linux

Elastic Kibana is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Logstash 'CVE-2014-4326' RCE Vulnerability - Linux

Elastic Logstash is prone to a remote code execution RCE vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Elastic Logstash 'CVE-2015-4152' Directory Traversal Vulnerability - Linux

Elastic Logstash is prone to a directory traversal vulnerability. This VT has been deprecated and merged into the VT VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Elastic Logstash 'CVE-2014-4326' RCE Vulnerability

Elastic Logstash is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Logstash 'CVE-2015-4152' Directory Traversal Vulnerability

Elastic Logstash is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana Cross-site scripting (XSS) Vulnerability - Windows

Elastic Kibana is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana Cross-site Request Forgery (CSRF) Vulnerability - Windows

Elastic Kibana is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana/X-Pack Detection (HTTP)

HTTP based detection of Elastic Kibana and X-Pack. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...