CVE-2015-2821: Undefined Security Weakness

TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors...

GNOME Shell security, bug fix, and enhancement update

clutter 1.14.4-12 - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz1115162 1.14.4-11 - Fix a typo in the Requires 1.14.4-10 - Add patch for quadbuffer stereo suppport Resolves: rhbz1108891 cogl 1.14.1-6 - Add patches for quadbuffer stereo suppport Resolves:...

CVE-2015-1605: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager aka Quest Workspace Asset Manager before 9.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to 1 GetClientPackage.aspx or 2 GetProcessedPackage.aspx...

Dropbox Acquisitions: Privilege Escalation at invite feature @hackpad.com

Hey! I would like to report Privilege Escalation @hackpad.com's Invite feature. Description : Hackpad allows admin of the workspace to add/invite users for admin/member/guest etc roles. I can able to grant that access to any one with just one click. Attack Scenario: Lets say you have workspace...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

Design/Logic Flaw

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

CVE-2015-1307

CVE-2015-1307 affects KDE Plasma-Workspace (plasma-workspace) prior to 5.1.95. The vulnerability arises from a Trojan horse Look and Feel package, enabling remote attackers to obtain passwords. The available connected documents corroborate the same description across multiple sources (SUSE, NVD/N...

CVE-2015-1307

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

CVE-2015-1308

CVE-2015-1308 affects kde-workspace 4.2.0 and plasma-workspace prior to 5.1.95. Affects KDE desktop components that manage the X server session; the underlying issue allows remote attackers with access to the X server while the screen is locked to observe input events and thereby obtain passwords...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

KDE Plasma-Workspace Security Bypass Vulnerability

KDE is an open source graphical desktop environment for UNIX. A security bypass vulnerability exists in KDE Plasma-Workspace, which allows attackers to bypass security restrictions and perform unauthorized operations...

CVE-2015-1307: Improper Access Control

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

PT-2015-5199

Name of the Vulnerable Software and Affected Versions plasma-workspace versions prior to 5.1.95 Description The issue allows remote attackers to obtain passwords by utilizing a Trojan horse Look and Feel package. Recommendations For versions prior to 5.1.95, update to version 5.1.95 or later to...

CVE-2015-1308: Exposure of Sensitive Information to an Unauthorized Actor

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

PT-2015-5200

Name of the Vulnerable Software and Affected Versions kde-workspace version 4.2.0 plasma-workspace versions prior to 5.1.95 Description The issue allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

Unspecified Vulnerability in Oracle Database Server Workspace Manager Component

Oracle Database is a large database of commercial nature. An unspecified security vulnerability in the Oracle Database Server Workspace Manager component could be exploited by remote attackers to compromise system confidentiality, integrity, and availability...

Oracle Database Multiple Vulnerabilities (January 2015 CPU)

The remote Oracle database server is missing the January 2015 Critical Patch Update CPU. It is, therefore, affected by security issues in the following components : - Core RDBMS - DBMSUTILITY - PL/SQL - Recovery - Workspace Manager - XML Developer's Kit for C %NASLMINLEVEL 70300 C Tenable Network...

CVE-2014-6578

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDOTOPO and WMSYS.LT...