CVE-2015-0484

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492...

CVE-2015-0491

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459...

CVE-2015-0484

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492...

CVE-2015-0491

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459...

Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on May 26, 2015, and is being released to the NCCIC/ICS-CERT web site. Ralf Spenneberg of OpenSource Security has identified a denial of service DoS vulnerability in the Mitsubishi Electric Automation, Inc.,...

CVE-2014-9113

CCH Wolters Kluwer ProSystem fx Engagement aka PFX Engagement 7.1 and earlier uses weak permissions Authenticated Users: Modify and Write for the 1 Pfx.Engagement.WcfServices, 2 PFXEngDesktopService, 3 PFXSYNPFTService, and 4 P2EWinService service files in PFX Engagement, which allows local users...

Design/Logic Flaw

CCH Wolters Kluwer ProSystem fx Engagement aka PFX Engagement 7.1 and earlier uses weak permissions Authenticated Users: Modify and Write for the 1 Pfx.Engagement.WcfServices, 2 PFXEngDesktopService, 3 PFXSYNPFTService, and 4 P2EWinService service files in PFX Engagement, which allows local users...

CVE-2014-9113

CCH Wolters Kluwer ProSystem fx Engagement aka PFX Engagement 7.1 and earlier uses weak permissions Authenticated Users: Modify and Write for the 1 Pfx.Engagement.WcfServices, 2 PFXEngDesktopService, 3 PFXSYNPFTService, and 4 P2EWinService service files in PFX Engagement, which allows local users...

CVE-2014-9113

CVE-2014-9113 affects CCH Wolters Kluwer ProSystem fx Engagement (PFX Engagement) <= 7.1. The vulnerability stems from weak permissions on four service-related files inside the PFX Engagement directory: Pfx.Engagement.WcfServices, PFXEngDesktopService, PFXSYNPFTService, and P2EWinService. This...

Ovidentia FX Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13927/info Ovidentia FX is prone to a remote file include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server...

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation Vulnerability

No description provided by source. ? Asseco SEE iBank FX Client = 2.0.9.3 Local Privilege Escalation Vulnerability Vendor: Asseco SEE Product web page: http://www.asseco.com Affected version: 2.0.9.3 Build 22.06.2011 - Desktop/Enterprise Edition 1.2 1.1.5.1270 Service Pack 5 - Desktop Edition...

SiteBuilder-FX Top.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18756/info SiteBuilder-FX is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an...

iClone SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iClone SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.reallusion.com/iclone/ Platform: Windows Price:$199 Author...

JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D...

OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc...

JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D...

OpenJDK: JPEG decoder input stream handling (2D, 8029854)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Asseco SEE iBank FX Client 2.0.93 Privilege Escalation

Asseco SEE iBank FX Client = 2.0.9.3 Local Privilege Escalation Vulnerability Vendor: Asseco SEE Product web page: http://www.asseco.com Affected version: 2.0.9.3 Build 22.06.2011 - Desktop/Enterprise Edition 1.2 1.1.5.1270 Service Pack 5 - Desktop Edition 1.1.5.1247 1.0 Application download...

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation Asseco SEE iBank FX Client = 2.0.9.3 Local Privilege Escalation Vulnerability Vendor: Asseco SEE Product web page: http://www.asseco.com Affected version: 2.0.9.3 Build 22.06.2011 - Desktop/Enterprise Edition 1.2 1.1.5.1270 Service...

Asseco SEE iBank FX Client <= 2.0.9.3 Local Privilege Escalation Vulnerability

Summary FX Client is an offline application for e-banking that is intended only for legal entities. Description The application is vulnerable to an elevation of privileges vulnerability which can be used by a simple user that can change the executable file with a binary of choice. The vulnerabili...