PT-2013-3666

Name of the Vulnerable Software and Affected Versions HP SQL/MX versions 3.0 through 3.2 on NonStop servers Description The issue allows remote authenticated users to bypass intended access restrictions and modify data. This is related to the use of SQL/MP Objects. Recommendations For HP SQL/MX...

PT-2013-1862

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3 IBM TRIRIGA Application Platform version 8 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify data records...

WordPress Plugin Spiffy XSPF Player - 'playlist_id' SQL Injection

source: https://www.securityfocus.com/bid/58976/info Spiffy XSPF Player plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP Address Book - addressbookregisteradmin_index.php?q SQL Injection

PHP Address Book - addressbookregisteradminindex.php?q SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker t...

Improper access control

The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2012-1995

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1996

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to modify data via unknown vectors...

CVE-2012-1998

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997...

CVE-2012-1999

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1995

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1996

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to modify data via unknown vectors...

CVE-2012-1997

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998...

CVE-2012-1998

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997...

CVE-2012-1995

CVE-2012-1995 concerns HP Systems Insight Manager (SIM) prior to version 7.0. The available documents describe an unspecified vulnerability enabling local users to obtain sensitive information or modify data via unknown vectors. The exact root cause, vulnerable components, affected configurations...

PT-2013-1538

Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions prior to 7.0 Description The issue allows remote attackers to modify data. The exact vectors used for the attack are not specified. Recommendations For HP Systems Insight Manager SIM versions prior to 7....

CVE-2012-1999: Undefined Security Weakness

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-5202

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1612...