CVE-2011-3511

Oracle Database Vault (Database Vault component) on 10gR2/11gR1/11gR2 is affected by CVE-2011-3511, where users with DV_ACCTMGR or SYSDBA can bypass protections and execute OCIPasswordChange to change any user’s password. Root cause relates to privileged account handling; advisory TeamSHATTER not...

CVE-2011-3511

Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect integrity and availability via unknown vectors related to Privileged Account...

CVE-2011-3511: Undefined Security Weakness

Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect integrity and availability via unknown vectors related to Privileged Account...

Novell File Reporter Engine RECORD Element Tag Parsing Overflow (uncredentialed check)

Binary data novellfilereporterenginestackoverflow.nbin...

CVE-2007-5917: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/adminaccount.php in Skalinks 1.5 and earlier allows remote attackers to add arbitrary privileged accounts as administrators via the adminname, adminpassword, admintype, and Addadmin parameters...

Novell ZENworks Patch Management 6.0.52 - reportsdefault.asp Multiple SQL Injections

Novell ZENworks Patch Management 6.0.52 - reportsdefault.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/15220/info ZENworks Patch Management is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Novell ZENworks Patch Management 6.0.52 - '/computers/default.asp?Direction' SQL Injection

source: https://www.securityfocus.com/bid/15220/info ZENworks Patch Management is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in ...

Novell ZENworks Patch Management 6.0.52 - computersdefault.asp?Direction SQL Injection

Novell ZENworks Patch Management 6.0.52 - computersdefault.asp?Direction SQL Injection source: https://www.securityfocus.com/bid/15220/info ZENworks Patch Management is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Novell ZENworks Patch Management 6.0.52 - '/reports/default.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15220/info ZENworks Patch Management is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in ...