[security bulletin] HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549477 Version: 1 HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery CSRF, Cross Site Scripting XSS, Privilege...

[security bulletin] HPSBMA02592 SSRT100300 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows Running Adobe Flash, Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Modification

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549485 Version: 1 HPSBMA02592 SSRT100300 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows Running Adobe Flash, Remote Execution of Arbitrary Code, Denial of Service DoS,...

CVE-2010-3290

Unspecified vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-3289

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3288

Cross-site request forgery CSRF vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote authenticated users to gain privileges via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3289

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3289

HP Systems Insight Manager (SIM) prior to version 6.2 is affected by CVE-2010-3289, a remote XSS vulnerability that could allow an attacker to inject arbitrary web script or HTML via unspecified vectors. The HP security bulletin summarizes the impact as XSS with no confidentiality/availability co...

CVE-2010-3290

HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows prior to version 6.2 contains a vulnerability (CVE-2010-3290) that allows remote authenticated users to gain privileges via unknown vectors. The HP security bulletin confirms privilege escalation as the impact and notes that HP SIM v6...

CVE-2010-3288

Cross-site request forgery CSRF vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3288

HP Systems Insight Manager (SIM) before version 6.2 is affected by CVE-2010-3288: a remote CSRF vulnerability that could allow an attacker to hijack the authentication of unspecified victims. The HP security bulletin (HPSBMA02591) notes that HP SIM versions prior to 6.2 for HP-UX, Linux, and Wind...

CVE-2010-3288: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3290: Undefined Security Weakness

Unspecified vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-3289: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3286

Unspecified vulnerability in HP Systems Insight Manager SIM 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-3286

Unspecified vulnerability in HP Systems Insight Manager SIM 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-3286: Undefined Security Weakness

Unspecified vulnerability in HP Systems Insight Manager SIM 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors...

Adobe Flash Player, Reader, and Acrobat 'authplay.dll' Remote Code Execution Vulnerability

Description Adobe Flash Player, Reader, and Acrobat are prone to a remote code execution vulnerability. Adobe reports that this vulnerability is being exploited in the wild. This vulnerability is present in the following versions: Flash Player 10.0.45.2, 9.0.262, and earlier Flash Player 10.0.x a...