IBM Tivoli Storage Manager Operations Center Cross-Site Request Forgery Vulnerability

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A cross-site request forgery vulnerability...

Vulnerability in IBM Tivoli Storage Manager Operations Center

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A security vulnerability exists in IBM Tivol...

IBM Tivoli Storage Manager Operations Center Security Bypass Vulnerability

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A security bypass vulnerability exists in IB...

Oracle Enterprise Manager Grid Control Enterprise Manager Ops Center Component Denial of Service Vulnerability

Oracle Enterprise Manager Grid Control is a suite of systems management software from Oracle Corporation. The software provides centralized monitoring, lifecycle management and other functions for Oracle IT architecture. enterprise Manager Ops Center is one of the enterprise data center monitorin...

CVE-2014-5393

Directory traversal vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property location.hash...

CVE-2014-5393

The CVE-2014-5393 entry is confirmed for JobScheduler: the JobScheduler Operations Center (JOC) is affected. Affected versions are before 1.6.4246 and before 1.7.4241 (1.7.x). The issue is a directory traversal vulnerability that can be exploited by remote authenticated users with the info permis...

CVE-2014-5391

CVE-2014-5391 is a DOM-based Cross-Site Scripting vulnerability in the JobScheduler Operations Center (JOC) of SOS JobScheduler. Affected versions are before 1.6.4246 and before 1.7.4241 for the 1.6.x and 1.7.x lines, respectively. The vulnerability allows an attacker to inject arbitrary web scri...

CVE-2014-5391: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property location.hash...

CVE-2014-5393: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors...

Threat Outbreak Alert: Fake Payment Receipt Email Messages on June 19, 2013

Medium Alert ID: 29707 First Published: 2013 June 19 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment receipt for the recipient. The email message instructs the recipient to open the...

Threat Outbreak Alert: Fake Shipment Invoice Notification Email Messages on June 13, 2013

Low Alert ID: 29669 First Published: 2013 June 14 12:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a DHL shipment invoice. The text in the email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Bank Payment Transfer Notification Email Messages on June 13, 2013

Low Alert ID: 29667 First Published: 2013 June 14 12:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer notification for the recipient. The text in the email message attempts to convince the recipient to...

Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...

CVE-2012-6360

CVE-2012-6360 affects IBM Intelligent Operations Center (IOC) 1.5.0. The issue is a cross-site scripting (XSS) vulnerability where incoming event data fields can inject arbitrary JavaScript/HTML, leading to potential web UI script execution. IBM describes the affected product as IOC version 1.5.0...

CVE-2012-6360: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Intelligent Operations Center 1.5.0 allows remote attackers to inject arbitrary web script or HTML via event data fields...

[SECURITY] [DSA NONE] New security.debian.org server after fire in Twente

-------------------------------------------------------------------------- Debian Security Announcement [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2002 http://www.debian.org/security/faq -...