Code injection

HP Smart Zero Core 4.3 and 4.3.1 on the t410 All-in-One Smart Zero Client, t410 Smart Zero Client, t510 Flexible Thin Client, t5565z Smart Client, t610 Flexible Thin Client, and t610 PLUS Flexible Thin Client allows local users to obtain sensitive information, modify data, or cause a denial of...

PT-2013-3682

Name of the Vulnerable Software and Affected Versions HP Smart Zero Core versions 4.3 through 4.3.1 Description The issue allows local users to obtain sensitive information, modify data, or cause a denial of service. The exact vectors used for this are not specified. Recommendations For HP Smart...

PT-2013-3666

Name of the Vulnerable Software and Affected Versions HP SQL/MX versions 3.0 through 3.2 on NonStop servers Description The issue allows remote authenticated users to bypass intended access restrictions and modify data. This is related to the use of SQL/MP Objects. Recommendations For HP SQL/MX...

PT-2013-1862

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3 IBM TRIRIGA Application Platform version 8 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify data records...

WordPress Plugin Spiffy XSPF Player - 'playlist_id' SQL Injection

source: https://www.securityfocus.com/bid/58976/info Spiffy XSPF Player plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP Address Book - addressbookregisteradmin_index.php?q SQL Injection

PHP Address Book - addressbookregisteradminindex.php?q SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker t...

Improper access control

The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2012-1996

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to modify data via unknown vectors...

CVE-2012-1999

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1998

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997...

CVE-2012-1995

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1995

CVE-2012-1995 concerns HP Systems Insight Manager (SIM) prior to version 7.0. The available documents describe an unspecified vulnerability enabling local users to obtain sensitive information or modify data via unknown vectors. The exact root cause, vulnerable components, affected configurations...

CVE-2012-1996

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to modify data via unknown vectors...

CVE-2012-1997

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998...

CVE-2012-1995

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1998

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997...

CVE-2012-1999: Undefined Security Weakness

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors...