Xxe

Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager 1 HTTP or 2 HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka...

RHEL 5 : rgmanager (RHSA-2009:1339)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1339 advisory. The rgmanager package contains the Red Hat Resource Group Manager, which provides high availability for critical server applications in the event of...

RHEL 6 : resource-agents (RHSA-2011:1580)

An updated resource-agents package that fixes one security issue, several bugs, and adds multiple enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base...

CVE-2013-0358

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote...

Design/Logic Flaw

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote...

CVE-2013-0358

CVE-2013-0358 is supported by a TeamSHATTER advisory detailing a SQL Injection in Oracle Enterprise Manager (Resource Manager) affecting OEM Database Control 10.2.0.3/10.2.0.4/10.2.0.5, 11.1.0.7, 11.2.0.2/11.2.0.3 and EM Plugin for DB 12.1.0.1/12.1.0.2. The issue arises from vulnerable parameters...

Microsoft Windows TrueType Font (TTF)远程代码执行漏洞（MS12-078)

BUGTRAQ ID: 56842 CVECAN ID: CVE-2012-4786 Microsoft Windows是Microsoft开发的Windows是目前世界上用户最多、并且兼容性最强的操作系统。 Microsoft Windows未正确处理TrueType Font TTF文件而存在安全漏洞。通过诱使用户浏览恶意网站或打开恶意文件，未经身份验证的远程攻击者可利用此漏洞在内核态中执行任意代码。 0 Microsoft Windows RT Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows XP...

Fedora Update for glpi FEDORA-2012-10661

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Multiple CSRF Vulnerabilities in [GLPI Version 0.83.2]

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in GLPI Version 0.83.2. The following is the disclosure document: Title: Multiple CSRF Vulnerabilities in GLPI Version 0.83.2 ------------------------------------------------------------------------...

GLPI 0.83.2 Cross Site Request Forgery

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in GLPI Version 0.83.2. The following is the disclosure document: Title: Multiple CSRF Vulnerabilities in GLPI Version 0.83.2 ------------------------------------------------------------------------...

Fedora Update for torque FEDORA-2011-16128

Check for the Version of torque OpenVAS Vulnerability Test Fedora Update for torque FEDORA-2011-16128 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for glpi FEDORA-2012-1519

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-1519 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for glpi FEDORA-2012-1534

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-1534 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for torque FEDORA-2012-0372

Check for the Version of torque OpenVAS Vulnerability Test Fedora Update for torque FEDORA-2012-0372 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 15 Update: torque-3.0.3-1.fc15

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

CVE-2011-4925

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors...

CVE-2011-4925

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors...

Authentication flaw

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors...

CVE-2011-4925

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors...

CVE-2011-4925

TORQUE Resource Manager (Terascale Open-Source Resource and Queue Manager) =sys-cluster/torque-2.5.13 or >=sys-cluster/torque-4.1.7). The connected documents do not provide exploit code or in-the-wild details. If pursuing mitigation, apply vendor/security advisory guidance to upgrade to the sp...