Oliver Cross-Site Scripting Vulnerability

Oliver formerly known as Webshare is a set of WebFTP resource manager using Ajax and PHP development . A cross-site scripting vulnerability exists in Oliver version 1.3.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...

SQL Injection in GLPI

High-Tech Bridge Security Research Lab discovered a high-risk SQL injection vulnerability in a popular Information Resource Manager IRM system GLPI. IRM systems are usually used for management and audit of software packages, providing ITIL-compliant service desk. The vulnerability allows remote...

Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20151119)

A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well. CVE-2015-1867 The pacemaker packages have be...

CentOS 7 : pacemaker (CESA-2015:2383)

Updated pacemaker packages that fix one security issue, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

pacemaker security update

CentOS Errata and Security Advisory CESA-2015:2383 Updated pacemaker packages that fix one security issue, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common...

RHEL 7 : pacemaker (RHSA-2015:2383)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:2383 advisory. The Pacemaker Resource Manager is a collection of technologies working together to provide data integrity and the ability to maintain application...

pacemaker: acl read-only access allow role assignment

A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well...

Moderate: Red Hat Security Advisory: pacemaker security, bug fix, and enhancement update

Updated pacemaker packages that fix one security issue, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

[SECURITY] Fedora 23 Update: pacemaker-1.1.13-3.fc23

Pacemaker is an advanced, scalable High-Availability cluster resource manager for Corosync, CMAN and/or Linux-HA. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when...

GLPI 0.85.5 - Arbitrary File Upload / Filter Bypass / Remote Code Execution

Exploit Title: GLPI 0.85.5 RCE through file upload filter bypass Date: September 7th, 2015 Exploit Author: Raffaele Forte Vendor Homepage: http://www.glpi-project.org/ Software Link: https://forge.glpi-project.org/attachments/download/2093/glpi-0.85.5.tar.gz Version: GLPI 0.85.5 Tested on: CentOS...

Gentoo Security Advisory GLSA 201412-47

Gentoo Linux Local Security Checks GLSA 201412-47 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Polycom RealPresence Resource Manager Information Disclosure Vulnerability

RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An information disclosure vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to obta...

Polycom RealPresence Resource Manager Elevation of Privilege Vulnerability

RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An elevation of privilege vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to...

Polycom RealPresence Resource Manager Unauthorized Access Vulnerability

RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An unauthorized access vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to gain...

Polycom RealPresence Resource Manager Arbitrary File Deletion Vulnerability

RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An arbitrary file deletion vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to...

Polycom RealPresence Resource Manager Arbitrary File Download Vulnerability

RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An arbitrary file download vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to...

Scientific Linux Security Update : pacemaker on SL6.x i386/x86_64 (20150722)

A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well. CVE-2015-1867 This update also fixes the...

pacemaker security update

CentOS Errata and Security Advisory CESA-2015:1424 Updated pacemaker packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVS...

RHEL 6 : pacemaker (RHSA-2015:1424)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1424 advisory. The Pacemaker Resource Manager is a collection of technologies working together to provide data integrity and the ability to maintain application...

Code injection

Cisco Videoscape Policy Resource Manager PRM 3.5.4 allows remote attackers to cause a denial of service CPU and memory consumption, and TCP service outage via 1 a SYN flood or 2 another type of TCP traffic flood, aka Bug IDs CSCuu35104 and CSCuu35128...