Magento Community Edition and Enterprise Edition SQL Injection Vulnerabilities

Magento is a professional open-source PHP e-commerce system from Magento, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A SQL injection vulnerability exists in t...

Oracle Enterprise Manager Cloud Control Unspecified Vulnerability (April 2015 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by an unspecified flaw in the My Oracle Support Plugin subcomponent of the Enterprise Manager Base Platform component. A remote attacker can exploit this to impact the integrity of the system. Note tha...

CVE-2015-0473

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1.0.6 allows remote attackers to affect integrity via unknown vectors related to My Oracle Support Plugin...

CVE-2015-0473

CVE-2015-0473 affects Oracle Enterprise Manager Grid Control (MOS) Base Platform, specifically the Enterprise Manager Base Platform component in MOS 12.1.0.5 and 12.1.0.6. The vulnerability is described as unspecified, with remote attackers able to impact integrity via unknown vectors related to ...

CVE-2015-0473

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1.0.6 allows remote attackers to affect integrity via unknown vectors related to My Oracle Support Plugin...

Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 update

Red Hat JBoss Data Grid 6.4.1, which fixes several security issues, multiple bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

phpok the latest version of the CSRF getshell-a vulnerability warning-the black bar safety net

In the rear of the Typhoon the grid management service is by a get-type request to delete a template, the directory and file name to install lock file install. lock: http://localhost/phpok/admin.php?c=tpl&f=delfile&id=1&folder=./../../ data/&title=The install. lock After the request returns ok,...

Wordpress Justified Image Grid 2.0.1 LFD / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress plugin Justified Image Grid 2.0.1 LFD + XSS Exploit Author: NULLpOint7r Contact me: email protected Home: http://www.sec4ever.com/home/ Dork: inurl:/wp-content/plugins/justified-image-grid/ Date: 2015-02-16 Version:...

Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.0 update

Red Hat JBoss Data Grid 6.4.0, which fixes one security issue, multiple bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores,...

CVE-2015-0426

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

CVE-2015-0426

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

Code injection

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

CVE-2015-0426

CVE-2015-0426 affects Oracle Enterprise Manager Grid Control (Enterprise Manager Cloud Control) Base Platform UI Framework in versions 12.1.0.3 and 12.1.0.4. The vulnerability is described as an unspecified issue that allows remote attackers to affect confidentiality via unknown vectors related t...

CVE-2015-0426

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

Code injection

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

CVE-2014-6573

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

CVE-2014-6573

CVE-2014-6573 affects Oracle Enterprise Manager Grid Control’s Ops Center UI Framework in version 11.1.3 and 12.1.4. The vulnerability is described as an unspecified issue in the User Interface Framework that could allow remote attackers to impact integrity via unknown vectors. The NVD entry list...

Design/Logic Flaw

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...

CVE-2014-6138

CVE-2014-6138 affects IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4. Remote authenticated users can bypass intended grid-data access restrictions via unspecified vectors. The documents do not disclose the root cause or a confirmed exploit path. Affected product/versions are specif...

RHEL 5 : MRG (RHSA-2014:0350)

This is the final notification for the retirement of Red Hat Enterprise MRG Version 1 for Red Hat Enterprise Linux 5. This notification applies only to those customers with subscriptions for Red Hat Enterprise MRG Version 1 for Red Hat Enterprise Linux 5. In accordance with the Red Hat Enterprise...