MS15-050: Vulnerability in Service Control Manager could allow elevation of privilege: May 12, 2015

None None...

MS15-050: Vulnerability in Service Control Manager Could Allow Elevation of Privilege (3055642)

The remote Windows host is affected by a privilege escalation vulnerability in Windows Service Control Manager SCM due to improper verification of impersonation levels. A local attacker can exploit this, via a specially crafted application, to escalate their privileges and make calls to SCM for...

Unspecified Vulnerability in PeopleSoft Enterprise SCM Strategic Sourcing Component in Oracle PeopleSoft

Oracle PeopleSoft is a suite of enterprise human capital management solutions, and PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that transforms the way organizations manage, use and maintain their PeopleSoft software. An unspecified security vulnerabili...

CVE-2015-0485

Unspecified vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2015-0485

CVE-2015-0485 affects Oracle PeopleSoft Products 9.1 and 9.2 in the PeopleSoft Enterprise SCM Strategic Sourcing component. The vulnerability is described as an unspecified security issue that allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents...

scm-shop.de XSS vulnerability

Open Bug Bounty ID: OBB-54416 Description| Value ---|--- Affected Website:| scm-shop.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2014-2495

Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Purchasing...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Purchasing...

CVE-2014-2495

Technical details for CVE-2014-2495 are not publicly provided in the supplied documents. No concrete vulnerability specifics (affected product/version, root cause, impact, or remediation) are present. Monitor for updates.

CVE-2014-2495

Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Purchasing...

Motorola SURFBoard Cable Modem Directory Traversal

No description provided by source. Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the...

CVE-2014-0425

Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

Security feature bypass

Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2014-0425

CVE-2014-0425 concerns Oracle PeopleSoft 9.2 SCM Services Procurement. The provided documents do not reveal concrete technical details about the vulnerability’s root cause, affected component specifics beyond the general SCM Services Procurement scope, or explicit exploit/mitigation data. NVD des...

CVE-2014-0425

Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2014-0425: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

[USN-1998-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1998-1 October 22, 2013 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 12.04 LTS : linux-lts-raring vulnerabilities (USN-1995-1)

An information leak was discovered in the Linux kernel when reading broadcast messages from the notifypolicy interface of the IPSec keysocket. A local user could exploit this flaw to examine potentially sensitive information in kernel memory. CVE-2013-2237 Kees Cook discovered flaw in the Human...

CVE-2013-5826

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3 and 6.3.1 allows remote attackers to affect availability via unknown vectors related to Install / Installation...

Microsoft Windows Service Control Manager 本地权限提升漏洞(CVE-2013-3862)(MS13-077)

BUGTRAQ ID: 62182 CVECAN ID: CVE-2013-3862 Windows是一款由美国微软公司开发的窗口化操作系统 Windows 服务控制管理器 SCM 处理内存中对象的方式中存在一个特权提升漏洞。此漏洞源于处理注册表内的服务描述时，服务控制管理器 services.exe 存在重复释放错误。成功利用此漏洞的攻击者可执行任意代码，并可完全控制受影响的系统 0 Microsoft Windows Server 2008 Microsoft Windows 7 厂商补丁： Microsoft ---------...