Authentication flaw

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL...

CVE-2014-9618

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL...

CVE-2014-9618

The CVE-2014-9618 vulnerability affects Netsweeper’s Client Filter Admin portal (versions before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2). It allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. Public sou...

[SECURITY] Fedora 26 Update: imageinfo-0.05-27.fc26

ImageInfo computes and displays selected image attributes. It is similar in function to the ImageMagick "identify" utility, but provides a few additional attributes such as details of embedded ICC profiles, and allows command line selection of the attributes to be computed, avoiding unnecessary...

CVE-2014-9618: Improper Authentication

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL...

CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...

CVE-2017-10175

Vulnerability in the Oracle iSupport component of Oracle E-Business Suite subcomponent: Profiles. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10175: Undefined Security Weakness

Vulnerability in the Oracle iSupport component of Oracle E-Business Suite subcomponent: Profiles. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Oracle iStore Remote Vulnerability (CNVD-2017-27301)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle iStore is one of the ability to allow merchant...

Virtuozzo 7 : ipa-admintools / ipa-client / ipa-client-common / etc (VZLSA-2017-0001)

An update for ipa is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

HP SiteScope Multiple Vulnerabilities (HPESBGN03763)

The version of HP SiteScope running on the remote host is 11.2x or 11.3x. It is, therefore, affected by multiple vulnerabilities : - A cryptographic weakness exists in the sspu.jar library due to the use of hard-coded encryption keys. A local attacker can exploit this to disclose potentially...

iimk.ac.in XSS vulnerability

Vulnerable URL: http://www.iimk.ac.in/academics/pgp/pgp20profiles.php?min=264%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:14 GMT Vulnerability type...

Data Warehouse Permission issues

Cause MP Version 8 uses dataset rules to collect host security profiles and snapshots. When a collector is installed on an agent, there is no issue. The data is forwarded to Management Server and written to DW under the DW account. When a collector runs on a Management Server which is our use cas...

Republican Data Broker Exposes 198M Voter Records

Detailed voter profiles of 198 million voters were left exposed on an Amazon S3 account by Republican Party-affiliated data broker Deep Root Analytics. The discovery was made by Chris Vickery, cyber risk analyst at security firm UpGuard. “This was one of the most data rich datasets I’ve ever...

Description of the security update for Outlook 2016: June 13, 2017

None None...

tschechische-traumfrauen.de XSS vulnerability

Vulnerable URL: http://www.tschechische-traumfrauen.de/frauen-profile/?idsearch=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dalert%28%2Fopenbugbounty%2F%29%3Eod=0do=0=0=0=0=0=0=0=0=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| X...

Device limit per user in Enrollment profiles not being enforced MAM-only

Enrollment Profiles has been set to limit users on specific delivery groups to a certain limit of devices per user. This should prevent people on these delivery groups from activating Secure Hub on more devices than they are allowed. However, these users are still able to activate with no...

EulerOS 2.0 SP1 : ipa (EulerOS-SA-2017-1013)

According to the versions of the ipa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the default IdM password policies that lock out accounts after a certain number of failed login attempts were also applied t...

CVE-2016-8923

IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536...

The vulnerability of the iOS operating system, which allows a hacker to bypass cryptographic security measures

The vulnerability of the iOS operating system’s Profiles component is related to insufficient encryption strength. Exploiting this vulnerability allows a malicious actor to infiltrate the vulnerable Simple Certificate Enrollment Protocol SCEP component and circumvent cryptographic security measur...