Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2015-06831)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An unspecified vulnerability exists in Oracle E-Business Suite 11.5.10.2. Allows an authenticated remote user to affect availability via unspecified vectors associated with the DB listener in...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06978)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server 5.6.26 and earlier versions. Allows an authenticated...

UBUNTU-CVE-2015-4858

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913...

DEBIAN-CVE-2015-3247

Race condition in the workerupdatemonitorsconfig function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via unspecified vectors...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2015-03488)

IBM Business Process Manager is a comprehensive business process management platform. A cross-site scripting vulnerability exists in IBM Business Process Manager that could allow a remote, authenticated user to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-2116

CVE-2015-2116 affects HP Data Protector (Storage Data Protector) 7.x, specifically vulnerable until 7.03 Build 107 (patches to 7.03 Build 107 required after updating from 7.03 Build 105). HP’s Security Bulletin HPSBMU03321 confirms remote privilege escalation, DoS, and arbitrary code execution co...

PT-2015-1706 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.42 and earlier Oracle MySQL Server versions 5.6.23 and earlier Description: The issue is related to errors in the code of the Server: Optimizer component of the MySQL database management system. It allows a...

Double free

The authgssapiunwrapdata function in lib/rpc/authgssapimisc.c in MIT Kerberos 5 aka krb5 through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which allows remote authenticated users to cause a denial of service use-after-free and...

Cisco Prime Service Catalog Denial of Service Vulnerability

Cisco Prime Service Catalog is a solution provided by Cisco for all services offered through a single portal. A denial-of-service vulnerability exists in Cisco Prime Service Catalog versions prior to 10.1 that could be exploited by a remote, authenticated user to read arbitrary files or cause a...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2015-00568)

IBM Business Process Manager is a comprehensive business process management platform. A cross-site scripting vulnerability in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 allows a remote, authenticated user to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-5214

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager NAM 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, relat...

Directory traversal

Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to and execute...

UBUNTU-CVE-2014-8958

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database, 2 table, or 3 column name that is improperly handled during...

CVE-2014-4833

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote authenticated users to gain privileges via invalid input...

Path Traversal in webEdition

High-Tech Bridge Security Research Lab discovered vulnerability in webEdition, which can be exploited to read arbitrary files on the target system. 1 Path Traversal in webEdition: CVE-2014-5258 The vulnerability exists due to insufficient sanitization of the "file" HTTP GET parameter in...

SquirrelMail 1.2.11 move_messages.php Arbitrary File Moving

No description provided by source. source: http://www.securityfocus.com/bid/7952/info Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation. The problems appear to occur due to insufficient sanitization...

UBUNTU-CVE-2013-2040

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6872

CVE-2013-6872 affects Collabtive prior to 1.2. It is a SQL injection in managetimetracker.php via the id parameter in a projectpdf action, exploitable by remote authenticated users. The NVD entry lists a CVSS v2 base score of 6.5 (Medium) with network access, low attack complexity, single authent...

Ubuntu 12.10 : linux vulnerabilities (USN-2043-1)

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmenttation Offload UFO. An unprivileged...

USN-2043-1: Linux kernel vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload UFO. An unprivileged...