1155 matches found
CVE-2010-3525
CVE-2010-3525 affects Oracle’s PeopleSoft and JD Edwards Suite (8.9–9.1) in the following components: FMS, SCM, EPM, CRM, and Campus Solutions. The vulnerability is described as an unspecified issue that allows a remote attacker who is authenticated to affect confidentiality and integrity via unk...
CVE-2010-3533
CVE-2010-3533 affects PeopleSoft Enterprise SCM OM and CRM Order Capture (Oracle PeopleSoft/JD Edwards), specifically in PeopleSoft versions 8.9, 9.0 and 9.1. The initial description identifies an unspecified vulnerability that allows remote authenticated users to compromise confidentiality and i...
PT-2010-4895
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM OM and CRM Order Capture component versions 8.9 through 9.1 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors. Recommendations For...
PT-2010-4888
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite versions 8.9 Bundle 38, 9.0 Bundle 31, 9.1 Bundle 6 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit i...
PT-2010-4886
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM - Strategic Sourcing component versions prior to the fixed version Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors. No information is...
PT-2010-4898
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM versions 8.9 Bundle 38, 9.0 Bundle 31, 9.1 Bundle 6 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors. Recommendations For versions 8.9...
CVE-2010-3536: Undefined Security Weakness
Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...
CVE-2010-3526: Undefined Security Weakness
Unspecified vulnerability in the PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...
[SECURITY] Fedora 13 Update: cgit-0.8.2.1-4.fc13
This is an attempt to create a fast web interface for the git scm, using a builtin cache to decrease server io-pressure...
[SECURITY] Fedora 12 Update: cgit-0.8.2.1-4.fc12
This is an attempt to create a fast web interface for the git scm, using a builtin cache to decrease server io-pressure...
[SECURITY] Fedora 14 Update: cgit-0.8.2.1-4.fc14
This is an attempt to create a fast web interface for the git scm, using a builtin cache to decrease server io-pressure...
Code injection
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle 37, SCM 9.0 Bundle 30, and SCM 9.1 Bundle 4 allows local users to affect confidentiality, integrity, and availability via unknown vectors...
CVE-2010-2380
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle 37, SCM 9.0 Bundle 30, and SCM 9.1 Bundle 4 allows local users to affect confidentiality, integrity, and availability via unknown vectors...
CVE-2010-2380
CVE-2010-2380 affects PeopleSoft Enterprise FSCM within Oracle PeopleSoft/JD Edwards Suite SCM: SCM 8.9 Bundle #37, SCM 9.0 Bundle #30, and SCM 9.1 Bundle #4. The vulnerability is described as local, with impact to confidentiality, integrity, and availability, but vectors and root cause are unspe...
CVE-2010-2307: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via 1 "//" multiple leading slash, 2 ../ dot dot sequences, and encoded dot dot sequences in a URL...
Motorola Surfboard Cable Modem - Directory Traversal
Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the /etc/passwd file from the modem:...
Silverstripe <= v2.3.4: two XSS vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, http://silverstripe.org/, version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the...
Silverstripe CMS 2.3.4 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, , version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the 'CommenterURL' parameter...
Mandriva Update for kernel MDVSA-2008:234 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:234 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
kernel: Unix sockets kernel panic
The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...