PT-2013-4955

Name of the Vulnerable Software and Affected Versions Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager versions 2.5.x, 4.x, and earlier Description The issue allows remote authenticated users to execute arbitrary jobs by submitting a command due to improper access...

CVE-2013-4319: Undefined Security Weakness

pbsmom in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command...

Fedora Update for glpi FEDORA-2013-16601

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2013-16601 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 19 Update: glpi-0.83.9.1-4.fc19

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

CVE-2013-5315

Cross-site scripting XSS vulnerability in the Resource Manager in the MEE submodule mee.module in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than...

CVE-2013-5315

CVE-2013-5315 is an XSS flaw in Drupal’s Scald module (MEE submodule). Affected: Scald 6.x-1.x before 6.x-1.0-beta3 and Scald 7.x-1.x before 7.x-1.1. Vulnerability: unsanitized atom title in Resource Manager (mee.module) allows remote injection of script/HTML. Impact is low to partial in integrit...

CVE-2013-5315

Cross-site scripting XSS vulnerability in the Resource Manager in the MEE submodule mee.module in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than...

CVE-2013-5315

Cross-site scripting XSS vulnerability in the Resource Manager in the MEE submodule mee.module in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than...

PT-2013-5475

Name of the Vulnerable Software and Affected Versions Scald module versions 6.x-1.x before 6.x-1.0-beta3 Scald module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists in the Resource Manager of the MEE submodule in the Scald module for Drupal, allowing remote...

[SECURITY] Fedora 17 Update: glpi-0.83.9.1-1.fc17

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 18 Update: glpi-0.83.9.1-1.fc18

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Fedora Update for glpi FEDORA-2013-11396

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2013-11396 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 19 Update: glpi-0.83.9.1-1.fc19

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Directory traversal

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted 1 HTTP or 2 HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369...

Xxe

Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager 1 HTTP or 2 HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka...

CVE-2013-1225: Undefined Security Weakness

Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager 1 HTTP or 2 HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka...

PT-2013-2987

Name of the Vulnerable Software and Affected Versions Cisco Unified Customer Voice Portal CVP Software versions prior to 9.0.1 ES 11 Description The issue is related to a directory traversal vulnerability in the Resource Manager. This allows remote attackers to overwrite arbitrary files by sendin...

PT-2013-2988

Name of the Vulnerable Software and Affected Versions Cisco Unified Customer Voice Portal CVP Software versions prior to 9.0.1 ES 11 Description The issue allows remote attackers to read arbitrary files via a Resource Manager request containing an external entity declaration in conjunction with a...

CVE-2013-1224: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted 1 HTTP or 2 HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369...

RHEL 5 : rgmanager (RHSA-2009:1339)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1339 advisory. The rgmanager package contains the Red Hat Resource Group Manager, which provides high availability for critical server applications in the event of...