Directory traversal

Directory traversal vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors...

CVE-2014-5391

CVE-2014-5391 is a DOM-based Cross-Site Scripting vulnerability in the JobScheduler Operations Center (JOC) of SOS JobScheduler. Affected versions are before 1.6.4246 and before 1.7.4241 for the 1.6.x and 1.7.x lines, respectively. The vulnerability allows an attacker to inject arbitrary web scri...

CVE-2014-5393

The CVE-2014-5393 entry is confirmed for JobScheduler: the JobScheduler Operations Center (JOC) is affected. Affected versions are before 1.6.4246 and before 1.7.4241 (1.7.x). The issue is a directory traversal vulnerability that can be exploited by remote authenticated users with the info permis...

PT-2014-6449

Name of the Vulnerable Software and Affected Versions SOS JobScheduler versions prior to 1.6.4246 SOS JobScheduler versions 1.7.x prior to 1.7.4241 Description A directory traversal issue exists in the JobScheduler Operations Center JOC that allows remote authenticated users with the info...

CVE-2014-5391: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property location.hash...

CVE-2014-5393: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors...

Threat Outbreak Alert: Fake Payment Receipt Email Messages on June 19, 2013

Medium Alert ID: 29707 First Published: 2013 June 19 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment receipt for the recipient. The email message instructs the recipient to open the...

Threat Outbreak Alert: Fake Shipment Invoice Notification Email Messages on June 13, 2013

Low Alert ID: 29669 First Published: 2013 June 14 12:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a DHL shipment invoice. The text in the email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Bank Payment Transfer Notification Email Messages on June 13, 2013

Low Alert ID: 29667 First Published: 2013 June 14 12:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer notification for the recipient. The text in the email message attempts to convince the recipient to...

Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...

CVE-2012-6360

CVE-2012-6360 affects IBM Intelligent Operations Center (IOC) 1.5.0. The issue is a cross-site scripting (XSS) vulnerability where incoming event data fields can inject arbitrary JavaScript/HTML, leading to potential web UI script execution. IBM describes the affected product as IOC version 1.5.0...

PT-2013-1935

Name of the Vulnerable Software and Affected Versions IBM Intelligent Operations Center version 1.5.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via event data fields. This could potentially lead to unauthorized actions on the...

CVE-2012-6360: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Intelligent Operations Center 1.5.0 allows remote attackers to inject arbitrary web script or HTML via event data fields...

[SECURITY] [DSA NONE] New security.debian.org server after fire in Twente

-------------------------------------------------------------------------- Debian Security Announcement [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2002 http://www.debian.org/security/faq -...