CVE-2011-2277

Affected software: Oracle PeopleSoft SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13. The CVE describes an unspecified vulnerability that allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing. Root cause d...

CVE-2011-2277

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing...

CVE-2011-2277: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing...

Fedora System Compromised, But No Changes Made

The infrastructure of the Fedora Project was compromised over the weekend and an account belonging to a Fedora contributor was taken over by an attacker. However, Fedora officials said they don’t believe that the attacker was able to push any changes to the Fedora package system or make any actua...

Redmine SCM Repository 0.9.x/1.0.x - Arbitrary Command Execution (Metasploit)

$Id: redminescmexec.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Redmine SCM Repository Arbitrary Command Execution

$Id: redminescmexec.rb 11414 2010-12-25 14:43:13Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Redmine SCM Repository Arbitrary Command Execution

This module exploits an arbitrary command execution vulnerability in the Redmine repository controller. The flaw is triggered when a rev parameter is passed to the command line of the SCM tool without adequate filtering. Module Options msf use exploit/unix/webapp/redmine/scmexec msf...

Redmine SCM Repository - Arbitrary Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Redmine SCM Repository Arbitrary Command Execution', 'Description' = %q This module exploits an arbitrary command execution...

Fedora Update for cgit FEDORA-2010-15534

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2010-15534 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for cgit FEDORA-2010-15501

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2010-15501 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CVE-2010-3536

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3526

Unspecified vulnerability in the PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise SCM OM and CRM Order Capture component in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Code injection

Unspecified vulnerability in the 1 PeopleSoft Enterprise FMS, 2 SCM, 3 EPM, 4 CRM, and 5 Campus Solutions components in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3536

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3526

CVE-2010-3526 affects PeopleSoft Enterprise SCM - PO in Oracle PeopleSoft/JD Edwards Suite (8.9 Bundle #38, 9.0 Bundle #31, 9.1 Bundle #6). The connected documents indicate the vulnerability requires authentication (Remote Exploit without Auth: No) and could affect confidentiality and integrity v...

CVE-2010-3524

CVE-2010-3524 affects Oracle PeopleSoft/JD Edwards: PeopleSoft Enterprise SCM - Strategic Sourcing in 8.9 Bundle #38, 9.0 Bundle #31, 9.1 Bundle #6. The vulnerability allows remote authenticated users to affect confidentiality and integrity, via vectors not specified in the provided documents. Af...

CVE-2010-3525

CVE-2010-3525 affects Oracle’s PeopleSoft and JD Edwards Suite (8.9–9.1) in the following components: FMS, SCM, EPM, CRM, and Campus Solutions. The vulnerability is described as an unspecified issue that allows a remote attacker who is authenticated to affect confidentiality and integrity via unk...