CVE-2015-2140

HP Systems Insight Manager SIM before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-2139

HP Systems Insight Manager SIM before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-5403...

CVE-2015-5433

CVE-2015-5433 concerns the HP Virtual Connect Enterprise Manager (VCEM) SDK prior to 7.5.0, used with HP Matrix Operating Environment prior to 7.5.0 and other HP products. The HP security bulletin HPSBMU03413 rev.1 documents multiple vulnerabilities in the VCEM SDK that could be exploited remotel...

CVE-2015-2140

HP Systems Insight Manager SIM before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-5403

CVE-2015-5403 affects HP Matrix Operating Environment components (HP SIM before 7.5.0; SIM alongside SMH, VCA, VCRM, Insight Orchestration, VCEM) with HP Matrix OS versions prior to 7.5.0. The vulnerability enables remote authenticated users to obtain sensitive information via unspecified vectors...

Authorization

The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a 1 direct request or 2...

CVE-2015-5413

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2015-5412

Cross-site request forgery CSRF vulnerability in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Buffer overflow

Buffer overflow in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

Design/Logic Flaw

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2015-5412

Cross-site request forgery CSRF vulnerability in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5409

Buffer overflow in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2015-5409

HP Version Control Repository Manager (VCRM) prior to 7.5.0 is affected by CVE-2015-5409: an unspecified buffer overflow due to improper validation of user-supplied input. A remote, authenticated attacker could cause a denial of service or execute arbitrary code. Remediation: upgrade to version 7...

CVE-2015-5411

CVE-2015-5411 affects HP Version Control Repository Manager (VCRM) prior to 7.5.0, enabling remote authenticated users to obtain sensitive information via unspecified vectors. The vulnerability is part of multiple issues documented in HP’s HPSBMU03396 bulletin; remediation is to upgrade to VCRM 7...

mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling...

mysql: unspecified vulnerability related to Server:I_S (CPU July 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to Server : IS...

CVE-2015-5222

Red Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote authenticated users with build permissions to execute arbitrary shell commands with root permissions on arbitrary build pods via unspecified vectors...

CVE-2015-2018

IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-4950

The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1...

Cross site scripting

Cross-site scripting XSS vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php...