4696 matches found
CVE-2014-3129: Exposure of Sensitive Information to an Unauthorized Actor
The Java Server Pages in the Software Lifecycle Manager SLM in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1...
CVE-2011-0993
SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors...
Information disclosure
SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors...
CVE-2011-0993
SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors...
CVE-2011-0993
SUSE Lifecycle Management Server is affected by CVE-2011-0993: before version 1.1, it uses world-readable PostgreSQL credentials, allowing local users to obtain sensitive information via unspecified vectors. The impact is information disclosure; no exploit details are provided in the connected do...
CVE-2014-2457
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via unknown vectors related to Install...
CVE-2014-2458
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via unknown vectors related to Install...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install...
CVE-2014-2457
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via unknown vectors related to Install...
CVE-2014-2458
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install...
CVE-2014-2457
Technical details about CVE-2014-2457 are not publicly available in the provided documents; monitor for updates.
CVE-2014-2458
CVE-2014-2458 affects the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite (SCP) versions 6.1.0.3 and 6.1.1.3. The vulnerability is described as unspecified and allows remote attackers to compromise integrity via unknown vectors related to an Install issue. The NVD e...
PT-2014-2107
Name of the Vulnerable Software and Affected Versions SUSE Lifecycle Management Server versions prior to 1.1 Description The issue allows local users to obtain sensitive information due to world-readable postgres credentials. Recommendations For SUSE Lifecycle Management Server versions prior to...
PT-2014-4707
Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite versions 6.0 through 6.1.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the...
PT-2014-4708
Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite versions 6.1.0.3 and 6.1.1.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the...
CVE-2011-0993: Undefined Security Weakness
SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors...
CVE-2014-2458: Undefined Security Weakness
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install...
CVE-2014-2457: Undefined Security Weakness
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via unknown vectors related to Install...
Web Application Security Begins with Programming Language
When building an enterprise Web application, the most foundational decision your developers make will be the language in which the app is written. But is there a barometer that measures the security of the programming languages developers have at their disposal, or are comfortable with, versus...