CVE-2015-2895

CVE-2015-2895 concerns the Up.time client in Idera Uptime Infrastructure Monitor. The vulnerability is a buffer overflow in the up.time client (7.4) that could allow a remote attacker to trigger arbitrary code execution by sending input longer than a certain size. The CERT advisory notes remediat...

CVE-2015-2896

The up.time client in Idera Uptime Infrastructure Monitor through 7.6 allows remote attackers to obtain potentially sensitive version, OS, process, and event-log information via a command...

CVE-2015-2896: Exposure of Sensitive Information to an Unauthorized Actor

The up.time client in Idera Uptime Infrastructure Monitor through 7.6 allows remote attackers to obtain potentially sensitive version, OS, process, and event-log information via a command...

CVE-2015-2895: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the up.time client in Idera Uptime Infrastructure Monitor 7.4 might allow remote attackers to execute arbitrary code via long command input...

PT-2015-5957

Name of the Vulnerable Software and Affected Versions Idera Uptime Infrastructure Monitor version 7.4 Description A buffer overflow issue exists in the up.time client, potentially allowing remote attackers to execute arbitrary code through long command input. Recommendations For Idera Uptime...

PT-2015-5958

Name of the Vulnerable Software and Affected Versions Idera Uptime Infrastructure Monitor versions prior to 7.7 Description The issue allows remote attackers to obtain potentially sensitive information, including version, OS, process, and event-log details, via a command. Recommendations For Ider...

PT-2015-5956

Name of the Vulnerable Software and Affected Versions Idera Uptime Infrastructure Monitor versions 6.0 through 7.2 Description The issue is related to a format string vulnerability in the up.time client, which can be exploited by remote attackers to cause a denial of service, resulting in an...

CVE-2015-2894: Use of Externally-Controlled Format String

Format string vulnerability in the up.time client in Idera Uptime Infrastructure Monitor 6.0 and 7.2 allows remote attackers to cause a denial of service application crash via format string specifiers...

SUSE-SU-2015:2053-1 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

SUSE-SU-2015:2053-2 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via 1 an SNMP OID object, 2 an SNMP trap message, 3 the View Names field, 4 the Group Names field, 5 the Flow Monitor Credentials field, 6 the Flow...

UBUNTU-CVE-2015-8619

The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service out-of-bounds write and application crash...

PT-2015-3282

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue concerns the Human Monitor Interface support in QEMU, allowing remote attackers to cause a denial of service. This can be achieved through an out-of-bounds write, leading to an...

qemu -- denial of service vulnerability in Human Monitor Interface support

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the Human Monitor InterfaceHMP support is vulnerable to an OOB write issue. It occurs while processing 'sendkey' command in hmpsendkey routine, if the command argument is longer than the 'keynamebuf' buffer size. A...

CVE-2015-8619

The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service out-of-bounds write and application crash...

Red Hat JBoss Enterprise Application Platform Denial of Service Vulnerability

Red Hat JBoss Enterprise Application Platform is a set of open source , J2EE-based middleware platform. Red Hat JBoss Enterprise Application Platform fails to properly authorize server shutdown privileges, allowing remote attackers to conduct denial-of-service attacks in the Monitor, Deployer, or...

GoAutoDial CE 3.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title : GoAutoDial CE 3.3 Multiple SQL injections, Command Injection Date : 06/12/2015 Author : R-73eN Tested on : goautodial-32bit-ce-3.3-final Software : http://goautodial.org/ | | / | / | / \ | | | || ' | | / | | / \ ' \ / \ | | | || | | |...

CVE-2015-5304: Undefined Security Weakness

Red Hat JBoss Enterprise Application Platform EAP before 6.4.5 does not properly authorize access to shut down the server, which allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a denial of service via unspecified vectors...

PT-2015-6841

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP versions prior to 6.4.5 Description The issue allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a denial of service. This is due to improper authorization o...

Ubuntu Screen Lock Bypass

The vulnerability of the driver/subprocs.c file of the XScreenSaver component in the Ubuntu operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious individual to bypass screen lockouts by reconnecting the monitors...