PT-2016-6711

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 2.x through 2.3.5 Open Ticket Request System OTRS versions 4.x through 4.0.4 Open Ticket Request System OTRS versions 5.x through 5.0.4 Description The issue allows remote attackers to execute arbitrary...

Unspecified Vulnerability in Solaris Libc Library Component

Solaris is a unix-based operating system. An unspecified vulnerability in the Solaris Libc Library component could allow an attacker to launch a denial-of-service attack or unauthorized modification of some data...

PT-2015-2192

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.x through 4.6.x Description The issue arises from the libxl library in Xen not properly handling the readonly flag on disks when using the qemu-xen device model. This allows local guest users to write to a read-only disk image...

PT-2015-5261

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions prior to 6.4.5 Description The issue allows remote administrators to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations For versions...

PT-2015-5391

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3.400 Description The issue allows remote authenticated ePO users to execute arbitrary SQL commands. This could potentially lead to unauthorized data access or modification...

PT-2014-8670

Name of the Vulnerable Software and Affected Versions SAP Environment, Health, and Safety Management affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations At...

PT-2014-8669

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Warehouse affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The vulnerability is related to ...

PT-2014-5800

Name of the Vulnerable Software and Affected Versions NICE Recording eXpress aka Cybertech eXpress versions 6.5.7 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The exact vectors used fo...

Taobao decoration can reference external js file-bug warning-the black bar safety net

Taobao decoration page for the js filter is not strict you can use user reference to an external js file, you can obtain other Taobao user cookies, modify your own shop reviews, baby sell number and the like. In Taobao decoration page that has a background image uploaded, as long as firebug for...

PT-2014-5646

Name of the Vulnerable Software and Affected Versions FrontAccounting versions prior to 2.3.21 Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations For versions prior to 2.3.21, update to...

PT-2014-2736

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.x through 8.5 FP3 IBM InfoSphere Information Server versions 8.7.x through 8.7 FP2 IBM InfoSphere Information Server versions 9.1.x through 9.1.2.0 Description The issue allows remote authenticated...

PT-2013-5523

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 IBM Sterling File Gateway version 2.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification...

PT-2012-5675

Name of the Vulnerable Software and Affected Versions Agile FleetCommander versions prior to 4.08 Agile FleetCommander Kiosk versions prior to 4.08 Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification...

PT-2012-2820

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 through 7.5 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be done via unspecified vectors, potentially leading to unauthorized data access or...

[security bulletin] HPSBGN02787 SSRT100876 rev.1 - HP AssetManager, Remote Cross Site Scripting (XSS) and Unauthorized Data Modification

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03403333 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03403333 Version: 1 HPSBGN02787...

PT-2012-2435

Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary SQL commands via crafted string input, potentially leading to unauthorized data access or modification. Recommendations For...

PT-2011-4394

Name of the Vulnerable Software and Affected Versions ATCOM Netvolution version 2.5.8 Description The issue allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header, potentially leading to unauthorized data access or modification. Recommendations For ATCOM Netvolution...

EV0073.txt

New eVuln Advisory: Magic Downloads Unauthorized Data Modification http://evuln.com/vulns/73/summary.html --------------------Summary---------------- eVuln ID: EV0073 CVE: CVE-2006-0722 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com Software: Magic Downloads Sowtware's Web...

EV0072.txt

New eVuln Advisory: Magic News Lite PHP Code Execution & Unauthorized Data Modification http://evuln.com/vulns/72/summary.html --------------------Summary---------------- eVuln ID: EV0072 CVE: CVE-2006-0723 CVE-2006-0724 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com...

[eVuln] Magic Downloads Unauthorized Data Modification

New eVuln Advisory: Magic Downloads Unauthorized Data Modification http://evuln.com/vulns/73/summary.html --------------------Summary---------------- eVuln ID: EV0073 CVE: CVE-2006-0722 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com Software: Magic Downloads Sowtware's Web...