Design/Logic Flaw

Unspecified vulnerability in the Security Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, and 10.2.0.4; and Oracle Enterprise Manager Grid Control 10.1.0.6; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Audit...

CVE-2011-0852

CVE-2011-0852 affects Oracle Database Server components (10.1.0.5, 10.2.0.3, 10.2.0.4) and Oracle Enterprise Manager Grid Control 10.1.0.6, via Audit Administration in the Security Management module. Affects confidentiality, integrity, and availability; vulnerabilities are described as unspecifie...

PT-2011-2700

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.1.0.5, 10.2.0.3, 10.2.0.4 Oracle Enterprise Manager Grid Control version 10.1.0.6 Description The issue affects the Security Management component, allowing remote attackers to impact confidentiality, integrit...

Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities

Document Title: =============== Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 105 Product & Service Introduction: =============================== Pandora FMS is a monitorin...

Veterans Affairs breaches

The Department of Veterans Affairs was hit on two separate occasions by breaches in 2006. 26.5 million Veterans and their families had their names, Social Security numbers and dates of birth lifted after a laptop was swiped from an employee’s home in May. The laptop was retrieved in August and tw...

White House Unveils Cybersecurity Legislative Agenda

The White House proposed Thursday reforming the Federal Information Security Management Act by formalizing the Department of Homeland Security role in managing cybersecurity for the federal government's civilian computers and networks. What the Obama administration does not propose is the...

OSSIM repository_attachment.php页面任意文件上传漏洞

BUGTRAQ ID: 37377 OSSIM即开源安全信息管理（Open Source Security Information Management），是一个非常流行和完整的开源安全管理系统。 OSSIM的ossiminstall/repository/repositoryattachment.php脚本没有正确地执行安全检查，用户可以向Webroot中的文件夹上传带有任意扩展名的文件。如果用户上传了包含有某些Web Shell的PHP脚本，就会导致执行任意PHP代码。 AlienVault OSSIM 2.2 AlienVault OSSIM 2.1.5 厂商补丁：...

AlienVault OSSIM Detection

Detects the installed version of AlienVault OSSIM Open Source Security Information Management and USM Unified Security Management This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpt...

McAfee ePolicy Orchestrator Framework Services Log Handling Format String (CVE-2008-1357)

McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. McAfee ePolicy Orchestrator is a central security management system to manage security policy, assess and enforce policy, notify...

CVE-2009-4374

CVE-2009-4374 describes a directory traversal vulnerability in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly earlier versions before 2.1.5-4. The flaw occurs in repository/repository_attachment.php, where an attacker can upload files into arbitrary directories...

Trend Micro OfficeScan CGI Password Decryption Buffer Overflow (CVE-2008-1365)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...

CVE-2008-7084

Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2008-7084

CVE-2008-7084 describes a directory traversal vulnerability in the web server 1.0 of Velocity Security Management System. An attacker can read arbitrary files by using a “..” in the URI. The NVD entry lists a CVSSv2 base score of 5.0 (Medium) with network access, low attack complexity, no authent...

CVE-2008-7084: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. dot dot in the URI...

NSD vulnerable to one-byte overflow

Overview A vulnerability exists in the way NSD processes certain types of packets that may lead to a one-byte buffer overflow. Description Name server daemon NSD is an open source name server developed by NLnet Labs. NSD contains an off-by-one error that can cause a one-byte buffer overflow when...

CentOS Update for python CESA-2007:1077-01 centos2 i386

Check for the Version of python OpenVAS Vulnerability Test CentOS Update for python CESA-2007:1077-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

HZHOST域名虚拟主机管理系统sql注射漏洞

是在线开通ftp.sql.web的一个管理系统。一套web程序。和IIS管理程序。实现在线开通. 存在文本框的注射。 HZHOST域名虚拟主机管理系统 暂无 123' UPDATE memlst SET upss='e10adc3949ba59abbe56e057f20f883e' WHERE unme='admin'-- 123' and select top 1 isnullcastunme as nvarchar4000,char32+char94+isnullcastUpss as nvarchar4000,char32 from select top 2unme,Upss fr...

Pooya Site Builder (PSB) SQL Injection Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/42 1. Description: Pooya site builder psb i...

Pooya Site Builder (PSB) 6.0 - Multiple SQL Injections

Pooya Site Builder PSB 6.0 - Multiple SQL Injections www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory:...

Pooya Site Builder (PSB) 6.0 - Multiple SQL Injections

www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/42 1. Description: Pooya site builder psb i...