IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2016-00155)

IBM Sterling B2B Integrator supports highly secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterling B2B Integrator 5.2. Allows a local user to obtain sensitive plaintext web service information by exploiting...

Multiple F5 Products Privilege Acquisition Vulnerabilities

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. A security vulnerability exists in the iControl API of several F5 products. Because the...

Lepide Active Directory Self Service Arbitrary User Password Change Domain Privilege Escalation Vulnerability

This vulnerability allows domain users to reset arbitrary account passwords on vulnerable installations of Lepide Active Directory Self Service. No user interaction is required to exploit this vulnerability. The specific flaw exists within processing of the password reset functionality of Active...

Updated moodle packages fix security vulnerability

In Moodle before 2.8.9, if guest access is open on the site, unauthenticated users can store Atto draft data through the editor autosave area, which could be exploited in a denial of service attack CVE-2015-5332. In Moodle before 2.8.9, due to a CSRF issue in the site registration form, it is...

Juniper Networks Junos OS J-Web SRX5000-Series DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability in J-Web. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; ...

FreeBSD : moodle -- multiple vulnerabilities (82b3ca2a-8c07-11e5-bd18-002590263bf5)

Moodle Release Notes report : MSA-15-0037 Possible to send a message to a user who blocked messages from non contacts MSA-15-0038 DDoS possibility in Atto MSA-15-0039 CSRF in site registration form MSA-15-0040 Student XSS in survey MSA-15-0041 XSS in flash video player MSA-15-0042 CSRF in lesson...

CVE-2015-7820

Race condition in the administration-panel web service in IBM System Networking Switch Center SNSC before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal...

CVE-2015-7818

CVE-2015-7818 affects IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0. The issue enables a local attacker to upload and execute a JSP file under SYSTEM privileges by exploiting the Apache Axis AdminService deployment method. Affected version detai...

CVE-2015-7820

CVE-2015-7820 is a race-condition vulnerability in IBM System Networking Switch Center (SNSC) and Lenovo Switch Center that, on affected releases, can let a remote attacker obtain privileged-account access and then abuse ZipDownload.jsp to read arbitrary files. The issue affects SNSC prior to 7.3...

IBM System Networking Switch Center ZipDownload.jsp Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose information on vulnerable installations of IBM System Networking Switch Center. Authentication is not required to exploit this vulnerability. The specific flaws exist within the IBM SNSC Web Service, which listens by default on ports 40080 HT...

IBM System Networking Switch Center Local Privilege Escalation Vulnerability

This vulnerability allows local unprivileged attackers to execute arbitrary code on vulnerable installations of IBM System Networking Switch Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IBM SNSC Web Service, which listens by default on...

IBM System Networking Switch Center FileReader.jsp Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose information on vulnerable installations of IBM System Networking Switch Center. Authentication is not required to exploit this vulnerability. The specific flaws exist within the IBM SNSC Web Service, which listens by default on ports 40080 HT...

Apple Mac OS X Web Service component (HTTP header) Security Bypass Vulnerability

Apple Mac OS X is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:apple:osxserver";...

APPLE-SA-2015-10-21-8 OS X Server 5.0.15

APPLE-SA-2015-10-21-8 OS X Server 5.0.15 OS X Server 5.0.15 is now available and addresses the following: BIND Available for: OS X Yosemite 10.10.5, OS X El Capitan 10.11.1 or later Impact: Multiple vulnerabilities in BIND Description: Multiple vulnerabilities existed in BIND versions prior to...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq...

CVE-2015-7031

The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors...

CVE-2015-7031

The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors...

Juniper Networks vSRX virtual denial of service vulnerability

Juniper Networks vSRX virtual is a firewall emulator product from Juniper Networks, Inc.J-Web is one of the network management tools. A security vulnerability in the J-Web service in the Juniper Networks vSRX virtual firewall used in Junos OS versions prior to 15.1X49-D20 can be exploited by a...

HP ArcSight Logger Brute Force Vulnerability

HP ArcSight Logger is a suite of log management software tools from Hewlett-Packard HP in the United States. The tool collects and integrates data from any log-generating source for log management, searching, indexing, reporting, analysis and retention. A security vulnerability exists in HP...

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 allows a intruder to execute any code they desire.

The vulnerability of the Factory Cast component of the microprogramming software for Schneider Electric’s Modicon M340 programmable logic controllers arises from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has passed...