Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2015-06830)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An unspecified vulnerability exists in Oracle E-Business Suite 11.5.10.2. Allows an authenticated remote user to affect availability via unspecified vectors associated with the DB listener in...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06839)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.45 and earlier and 5.6.26 and earlier...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06842)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server versions 5.5.45 and earlier and 5.6.26 and earlier...

CVE-2015-5648

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5649

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration...

IBM UrbanCode Deploy Elevation of Privilege Vulnerability

IBM UrbanCode Deploy is the United States IBM application automation deployment tool. The tool is based on a perfect application deployment automation management information model , to provide visual means of deployment logic design , and through the remote agent technology , to achieve complex...

IBM Emptoris Sourcing Information Disclosure Vulnerability

IBM Emptoris Sourcing is a suite of platforms from IBM USA for supplier sourcing decisions, examining cost, risk and performance, helping organizations get affordable prices and greater value from their suppliers. An information disclosure vulnerability exists in IBM Emptoris Sourcing that allows...

IBM Multi-Enterprise Integration Gateway_2 Information Disclosure Vulnerability

IBM Multi-Enterprise Integration Gateway is a cross-enterprise integrated communications gateway product from IBM in the United States. An information disclosure vulnerability exists in IBM Multi-Enterprise Integration Gateway2, which allows an authenticated remote user to obtain sensitive...

OpenLDAP ber_get_next Denial of Service (CVE-2015-6908)

A denial of service condition has been reported in OpenLDAP. The vulnerability is due to an obsolete assertion failure in bergetnext. A remote user can exploit this vulnerability by sending a crafted BER message to the target server. A successful exploitation will cause a denial of service...

CVE-2015-7707

Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp...

CVE-2015-0141

CVE-2015-0141 affects IBM OpenPages GRC Platform (versions 6.2–7.1). The root cause is insufficient access checks on JSON requests, allowing an authenticated user to modify arbitrary user filters. The vulnerability is documented with multiple related CVEs in IBM’s 2018 bulletin, which lists affec...

Drupal CMS Updater Module Security Restriction Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP.CMS Updater module for Drupal is a module for Drupal that provides security protection for Drupal websites. A security restriction bypass vulnerability exists in the Drupal CMS Updater module 7.x-1.3 and prior to 7.x-1.x,...

CVE-2015-7230

The vulnerability CVE-2015-7230 affects the Drupal Contributed module Workbench Email (7.x-3.x) prior to 7.x-3.4. Remote authenticated users with certain permissions can bypass node and field validation when saving a node, enabling possible unintended content handling. Affected product/version: W...

CVE-2015-7229

The Drupal Twitter module vulnerability CVE-2015-7229 affects Drupal sites using the Twitter submodule (6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, 7.x-6.x before 7.x-6.0). The root cause is improper access checks, allowing remote authenticated users with the post to twitter, add twitter acco...

Important: Red Hat Security Advisory: rubygem-openshift-origin-console security update

Updated rubygem-openshift-origin-console packages that fix one security issue are now available for Red Hat OpenShift Enterprise 2.2. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Canon PIXMA MG7500 Printer Cross-Site Request Forgery Vulnerability

The Canon PIXMA MG7500 is an inkjet MFP from Canon Japan.Remote UI is one of the remote user interface... A cross-site request forgery vulnerability exists in the Remote UI of the Canon PIXMA MG7500 printer, which can be exploited by a remote attacker to perform unauthorized operations...

PIXMA MG7500 Series vulnerable to cross-site request forgery

Overview PIXMA MG7500 Series provided by Canon Inc. contain a cross-site request forgery vulnerability. TOMITA Ryo of Fukuoka Junior High School attached to the Fukuoka University of Education FUE reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

CVE-2015-3247

Race condition in the workerupdatemonitorsconfig function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via unspecified vectors...

Cisco Identity Services Engine Access Control Bypass Vulnerability

Cisco Identity Services Engine A centralized policy engine for Cisco TrustSec solutions. A security vulnerability exists in the Cisco Identity Services Engine that allows a remote user to submit a special HTTP request to access arbitrarily customized HTML pages on the target Guest portal system...

HP Version Control Repository Manager Denial of Service Vulnerability

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A denial of service vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. This could allow an authenticated remote user to execute arbitrary...