CentOS 5 : sssd (CESA-2013:1319)

Updated sssd packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

[SECURITY] Fedora 21 Update: php-Smarty-3.1.21-1.fc21

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...

CVE-2013-5433

The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document...

Hardcoded credentials

The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document...

PT-2014-2926

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim versions 3.0 through 9.1 Description The issue concerns hardcoded database credentials in the Data Growth Solution for JD Edwards EnterpriseOne. This allows remote authenticated users to obtain sensitive information by...

CVE-2013-5433: Undefined Security Weakness

The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document...

PT-2014-2526

Name of the Vulnerable Software and Affected Versions OpenStack Identity Keystone versions prior to 2013.1 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and a crash, via multiple long requests. Recommendations For versions prior to...

CVE-2013-0579

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either 1 before or 2 after authentication...

CVE-2013-0580

Cross-site request forgery CSRF vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users...

CVE-2013-0577

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or delete documents or scripts via unspecified vectors...

Design/Logic Flaw

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or delete documents or scripts via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users...

CVE-2013-0577

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or delete documents or scripts via unspecified vectors...

CVE-2013-0579

The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either 1 before or 2 after authentication...

CVE-2013-0580

Cross-site request forgery CSRF vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users...

CVE-2013-0577

Summary (CVE-2013-0577) : IBM Infosphere Optim Data Growth for Oracle E-Business Suite (Optim E-Business Console) versions 6.0–9.1 are affected. The security bulletin describes multiple vulnerabilities in the Optim E-Business Console allowing a remote authenticated attacker to upload, modify, or ...

CVE-2013-0579

IBM Infosphere Optim Data Growth for Oracle E-Business Suite (versions 6.0–9.1) contains CVE-2013-0579 in the Optim E-Business Console. The vulnerability allows an attacker who has access to a legitimate user’s browser (before or after authentication) to impersonate that user, potentially exposin...

CVE-2013-0580

The CVE-2013-0580 issue affects IBM InfoSphere Optim Data Growth for Oracle E-Business Suite (versions 6.0–9.1), specifically the Optim E-Business Console. The vulnerability is a Cross-Site Request Forgery (CSRF) that can allow a remote authenticated attacker to hijack the authentication of arbit...

PT-2013-2436

Name of the Vulnerable Software and Affected Versions IBM Data Growth Solution for Oracle E-business Suite versions 6.0 through 9.1 Description The issue allows remote authenticated users to bypass intended access restrictions. This can lead to unauthorized creation, modification, or deletion of...

PT-2013-2438

Name of the Vulnerable Software and Affected Versions IBM Data Growth Solution for Oracle E-business Suite versions 6.0 through 9.1 Description The issue allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either before or after...