CVE-2014-2634

HP Service Manager (SM) exposed vulnerability CVE-2014-2634 affecting SM versions 7.21 and 9.x prior to 9.34. The server component could be accessed in a way that bypasses intended access controls, allowing remote attackers to modify data or cause a denial of service via unspecified vectors. The ...

CVE-2014-2633

The CVE-2014-2633 issue affects HP Service Manager (SM) Server components in HP SM 7.21 and SM 9.x up to before 9.34. The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to hijack user authentication via unspecified vectors. HP’s Security Bulletin HPSBMU03079 rev...

CVE-2014-2632

HP Service Manager CVE-2014-2632 affects the WebTier component across SM 7.21 and SM 9.x up to 9.33, allowing remote code execution via unknown vectors. The HP security bulletin HPSBMU03079 rev.1 documents an increase of privilege and other vulnerabilities impacting WebTier, with CVSSv2 base scor...

CVE-2014-3031

CVE-2014-3031 : In IBM Tivoli Business Service Manager, versions 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9 are affected by a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. The root cause is an ...

Oracle Automated Service Manager 1.3 Installation Local Privilege Escalation

No description provided by source. Oracle Automated Service Manager 1.3 local root during install Larry W. Cashdollar 1/29/2013 @larry0 SUNWsasm-1.3.1-20110815093723 https://updates.oracle.com/Orion/Services/download?type=readme&aru=15864534 From the README: Oracle Automated Service Manager 1.3.1...

[security bulletin] HPSBGN03008 rev.1 - HP Software Service Manager, "HeartBleed" OpenSSL Vulnerability, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04248997 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04248997 Version: 1 HPSBGN03008 rev....

CVE-2014-1983

Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service CPU consumption via unknown vectors...

CVE-2014-1984

Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors...

Session fixation

Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service CPU consumption via unknown vectors...

CVE-2014-1984

Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2014-1983

Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service CPU consumption via unknown vectors...

CVE-2014-1984

CVE-2014-1984 describes a session-fixation vulnerability in Cybozu Remote Service Manager’s management screen. The flaw affects Remote Service Manager versions 2.3.0 and 3.x prior to 3.1.1, allowing a remote, unauthenticated attacker to hijack web sessions and impersonate a registered user via un...

CVE-2014-1983

CVE-2014-1983 affects Cybozu Remote Service Manager up to 3.1.0 (and 2.3.0 and earlier); it allows remote attackers to cause a denial of service by triggering CPU consumption via unspecified vectors. Some sources note an incomplete fix leading to a related CVE-2014-7266 that involves algorithmic ...

Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)

Overview Remote Service Manager provided by Cybozu,Inc. is a software to access on-premise systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a denial-of-service DoS vulnerability. Impact An attacker may cause a denial-of-service on a server that is...

JVN#00058727: Cybozu Remote Service Manager vulnerable to session fixation

Remote Service Manager provided by Cybozu,Inc. is a software to access on-premise systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a session fixation vulnerability. Impact A remote, unauthenticated attacker may impersonate a registered user. As a result...

Fedora Update for systemd FEDORA-2014-4962

Check for the Version of systemd OpenVAS Vulnerability Test Fedora Update for systemd FEDORA-2014-4962 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 20 Update: systemd-208-16.fc20

systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...

[security bulletin] HPSBMU02964 rev.1 - HP Service Manager, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Remote Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access, Disclosure of Informa

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04117626 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04117626 Version: 1 HPSBMU02964 rev....

HP Service Manager multiple security vulnerabilities

Cross-Site Scripting XSS, Cross-Site Request Forgery CSRF, Remote Denial of Service DoS, Execution of Arbitrary Code, Unauthorized Access, Disclosure of Information and Authentication Issues...