CVE-2014-5391

CVE-2014-5391 is a DOM-based Cross-Site Scripting vulnerability in the JobScheduler Operations Center (JOC) of SOS JobScheduler. Affected versions are before 1.6.4246 and before 1.7.4241 for the 1.6.x and 1.7.x lines, respectively. The vulnerability allows an attacker to inject arbitrary web scri...

CVE-2014-5393

The CVE-2014-5393 entry is confirmed for JobScheduler: the JobScheduler Operations Center (JOC) is affected. Affected versions are before 1.6.4246 and before 1.7.4241 (1.7.x). The issue is a directory traversal vulnerability that can be exploited by remote authenticated users with the info permis...

PT-2014-6449

Name of the Vulnerable Software and Affected Versions SOS JobScheduler versions prior to 1.6.4246 SOS JobScheduler versions 1.7.x prior to 1.7.4241 Description A directory traversal issue exists in the JobScheduler Operations Center JOC that allows remote authenticated users with the info...

PT-2014-6447

Name of the Vulnerable Software and Affected Versions SOS JobScheduler versions prior to 1.6.4246 SOS JobScheduler versions 1.7.x prior to 1.7.4241 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the location.hash property...

CVE-2014-5393: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors...

CVE-2014-5391: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property location.hash...

Opera <= 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities

No description provided by source. Opera JPEG processing - Heap corruption vulnerabilities ======================================================= Date..: 8th September 2006 31th October 2006 update 3rd November 2006 update 5th January 2007 public release...

Plume CMS 1.2.3 - Multiple SQL Injection Vulnerabilities

No description provided by source. Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 Release Date. 12-Aug-2009 Last Update. - Vendor Notification Date. 16-Jun-2009 Product. Plume CMS Platform. Independent Affected versions. 1.2.3 verified, possibly others Severity...

Fedora Update for sos FEDORA-2014-7490

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for sos FEDORA-2014-7479

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: sos-3.1-1.fc20

Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging. Sos is commonly used to help support technicians and developers...

Fedora 19 : sos-3.1-1.fc19 (2014-7490)

Updated sos packages that fix a number of bugs and add several enhancements are now available. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

CVE-2014-3445 - Unauthenticated Backup and Password Disclosure in HandsomeWeb SOS Webpages

Vulnerability title: Unauthenticated Backup and Password Disclosure in HandsomeWeb SOS Webpages CVE: CVE-2014-3445 Vendor: HandsomeWeb Product: SOS Webpages Affected version: 1.1.11 and earlier Fixed version: 1.1.12 Reported by: Freakyclown Details: The default setup allows an unauthenticated use...

libjpeg: information leak (read of uninitialized memory)

The getsos function in jdmarker.c in 1 libjpeg 6b and 2 libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers,...

SOS Webpages 1.1.1 /backup.php 备份文件发现漏洞

No description provided by source...

CVE-2014-3925

CVE-2014-3925 affects sosreport in Red Hat sos 1.7 and earlier on RHEL 5, where the generated archive may contain an fstab with cleartext passwords and lacks a warning to review for passwords, enabling potential sensitive-information disclosure if an attacker can access the technical-support data...

PT-2014-5611

Name of the Vulnerable Software and Affected Versions Red Hat sos versions 1.7 and earlier Description The issue concerns the sosreport in Red Hat sos, which generates an archive that may contain cleartext passwords in the fstab file. This archive lacks a warning about reviewing its contents to...

HandsomeWeb SOS Webpages 1.1.11 Backup / Hash Disclosure

Vulnerability title: Unauthenticated Backup and Password Disclosure in HandsomeWeb SOS Webpages CVE: CVE-2014-3445 Vendor: HandsomeWeb Product: SOS Webpages Affected version: 1.1.11 and earlier Fixed version: 1.1.12 Reported by: Freakyclown Details: The default setup allows an unauthenticated use...

RedHat Update for sos RHSA-2013:1121-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4083

The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes 1 Certificate-based Red Hat Network private entitlement keys and the 2 private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive...