CVE-2015-4875

CVE-2015-4875 affects Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5, specifically the Agent Next Gen subcomponent. The vulnerability is described as unspecified and remotely exploitable to impact availability, with vectors for exploitation not disclosed in the provided documents. N...

CVE-2015-4875

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect availability via unknown vectors related to Agent Next Gen...

CVE-2015-4874

CVE-2015-4874 is described as an unspecified vulnerability in the Agent Next Gen subcomponent of Oracle Enterprise Manager Grid Control, affecting versions 12.1.0.4 and 12.1.0.5. The vulnerability is exploitable by a local attacker and can impact confidentiality, integrity, and availability. The ...

CVE-2015-4859

CVE-2015-4859 affects Oracle Enterprise Manager Grid Control 12.1.0.4/12.1.0.5, specifically the Agent Next Gen subcomponent. The vulnerability is described as unspecified, with a remote attacker able to affect confidentiality and integrity via unknown vectors. Several connected sources reference...

CVE-2015-2633

CVE-2015-2633 is described across multiple connected records as an unspecified vulnerability in the Ops Center subcomponent of Oracle Enterprise Manager Grid Control (versions 12.1.0.1 and 12.2.2). The vulnerability is exploitable by remote authenticated users and is said to affect confidentialit...

CVE-2015-5950

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privilege...

CVE-2015-1841

The Web Admin interface in Red Hat Enterprise Virtualization Manager RHEV-M allows local users to bypass the timeout function by selecting a VM in the VM grid view...

CVE-2015-1841

The Web Admin interface in Red Hat Enterprise Virtualization Manager RHEV-M allows local users to bypass the timeout function by selecting a VM in the VM grid view...

Sql injection

SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. A security vulnerability exists in the Enterprise Manager for Oracle Database Content Management component that can be exploited by remote attackers to compromise system confidentiality and integrity...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Content Management Component

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. A security vulnerability exists in the Enterprise Manager for Oracle Database Content Management component that can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control RAC Management Component

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. A security vulnerability exists in the Enterprise Manager for Oracle Database RAC Management component that can be exploited by remote attackers to compromise system confidentiality...

Design/Logic Flaw

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management...

CVE-2015-2646

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5, 12.1.0.6, 12.1.0.7; EM DB Control: 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote attackers to affect integrity via...

CVE-2015-2647

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect...

CVE-2015-4735

CVE-2015-4735 affects Oracle Enterprise Manager Grid Control (RAC Management) in EM Base Platform 11.1.0.1 and EM DB Control 11.2.0.3/11.2.0.4. The vulnerability allows remote, unauthenticated access via HTTP to read a subset of data, compromising confidentiality. Public sources in connected docu...

CVE-2015-2646

CVE-2015-2646 affects Oracle Enterprise Manager Grid Control Content Management. The vulnerability lies in the Content Management component and can impact integrity; affected products include EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.5–12.1.0.7, and EM DB Control 11.1.0.7, 11.2.0.3, 11.2...

The Triumphant Finale of CSI: Cyber

It’s been a couple of months since we left our heroes on CSI: Cyber, and boy, have they been busy. They have apparently solved many crimes using cyber-sleuthing, acquired some decidedly non-cyber firearms skills, and, in the case of our man Krumitz, taken up running. We wanted to check in and see...

Open Smart Grid Protocol Alliance Plan to Fix its Weak Crypto

The Open Smart Grid Protocol Alliance, which recently came under fire for a weak crypto implementation in its protocol, will upgrade existing devices, likely starting in September. Harry Crijns, secretary of the OSGP Alliance in The Netherlands, said fixes have been developed and are “under a...

Open Smart Grid Protocol Homegrown Crypto Weaknesses

In the three years since its inception, the Open Smart Grid Protocol has found its way into more than four million smart meters and similar devices worldwide. And like its SCADA, industrial control system, and embedded system brethren, it’s rife with security issues. Two researchers, Phillip...