PT-2014-2930

Name of the Vulnerable Software and Affected Versions IBM Rational Software Architect RSA Design Manager and Rational Rhapsody Design Manager versions 3.x through 3.0.1 IBM Rational Software Architect RSA Design Manager and Rational Rhapsody Design Manager versions 4.x before 4.0.6 Description Th...

Joomla! Component Inneradmission - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/66708/info Inneradmission component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Puntopy - 'novedad.php' SQL Injection

source: https://www.securityfocus.com/bid/67241/info Puntopy is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

CVE-2013-6205

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6206

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6206

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6206

HP Rapid Deployment Pack (RDP) and HP Insight Control Server Deployment are affected by CVE-2013-6206. The vulnerability enables remote attackers to obtain sensitive information, modify data, or trigger a denial of service via unknown vectors. CVSS v2 base score is 9.0 (HIGH) with Network attack ...

PT-2014-3050

Name of the Vulnerable Software and Affected Versions HP Rapid Deployment Pack RDP and Insight Control Server Deployment affected versions not specified Description The issue allows remote attackers to obtain sensitive information, modify data, or cause a denial of service. The exact vectors used...

CVE-2013-6200

Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors...

Code injection

Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors...

PT-2014-3883

Name of the Vulnerable Software and Affected Versions IBM Rational Focal Point versions 6.4.x through 6.5.x before 6.5.2.3 IBM Rational Focal Point versions 6.6.x before 6.6.1 Description The issue allows remote authenticated users to modify data via vectors involving a direct object reference...

WordPress AdRotate Plugin 3.9.4 - SQL Injection

This WordPress AdRotate plugin's clicktracker.php "track param" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin to 3.9.5...

Jorjweb - 'id' SQL Injection

source: https://www.securityfocus.com/bid/66377/info Jorjweb is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, access or modify data, o...

PT-2014-3174

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 7.0.0.2 CF26 and 8.x through 8.0.0.1 CF08 Description The issue is related to an unrestricted file upload vulnerability in the Registration/Edit My Profile portlet. This vulnerability can be exploited ...

CVE-2013-6722: Undefined Security Weakness

Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vectors...

PT-2014-3769

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Operations Manager VSOM affected versions not specified Description The issue allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a...

PT-2013-4788

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.0.0.x before 8.0.0.1 CF09 Description The issue allows remote authenticated users to modify data or cause a denial of service. This is possible because administrative privileges are not required for Portal...

iScripts AutoHoster - additionalsettings.php SQL Injection

iScripts AutoHoster - additionalsettings.php SQL Injection source: https://www.securityfocus.com/bid/64377/info iScripts AutoHoster is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromi...

iScripts AutoHoster - main_smtp.php Traversal

iScripts AutoHoster - mainsmtp.php Traversal source: https://www.securityfocus.com/bid/64377/info iScripts AutoHoster is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the...