CVE-2016-0525: Undefined Security Weakness

Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Work Provider Administration...

PT-2016-4257

Name of the Vulnerable Software and Affected Versions Oracle Retail Order Broker Cloud Service versions 4.0 through 4.1 Description The issue affects confidentiality, integrity, and availability. It is related to System Administration, but the specific vectors are unknown. Recommendations For...

CVE-2016-0550: Undefined Security Weakness

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to CRM HTML Administration...

PT-2016-4307

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 Description The issue affects confidentiality and integrity, and it is related to the Administration component. It can be exploited by remote authenticated users via unknow...

PT-2016-4277

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 11.5.10.2 Description The issue affects confidentiality and integrity. It is related to Work Provider Administration in the Oracle Universal Work Queue component, but the specific vectors are unknown...

Customer can see Internal Comment created by Automation Action

h5. Environment - run JIRA from atlas-debug - JIRA 7.0.5 - JIRA Service Desk 3.0.5 h5. Steps to reproduce Create Service Desk project go to Administration - Automation tab click New rule - Custom rule add Trigger Issue Created add Action Add comment put some Comment text and select Internal as...

IBM WebSphere Application Server Multiple Vulnerabilities (swg21595172)

IBM WebSphere Application Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM WebSphere Application Server Multiple Vulnerabilities (swg21669554)

IBM WebSphere Application Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SlemBunk Part II: Prolonged Attack Chain and Better-Organized Campaign

Introduction Our follow-up investigation of a nasty Android banking malware we identified at the tail end of last year has not only revealed that the trojan is more persistent than we initially realized – thus making for a much more dangerous threat – but that it is also being used as part of an...

PT-2016-1113 · Ibm +1 · Ibm Tivoli Common Reporting +7

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions affected versions not specified IBM Tivoli Common Reporting versions affected versions not specified IBM Sterling B2B Integrator versions affected versions not specified IBM Sterling Integrator versio...

CVE-2015-7283

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00AADZ.3C0 has a default password of 1234 for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-7277

The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

Default credentials

The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-7277

The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-7280

The CVE-2015-7280 entry affects ReadyNet WRT300N-DD devices (firmware 1.0.26). The vulnerability arises from default credentials (admin/admin) on the web administration interface, enabling a LAN‑based attacker to obtain administrative privileges. Impact is compatible with a high/severe rating (NV...

CVE-2015-7277

Amped Wireless R10000 router (firmware 2.5.2.11) is affected by CVE-2015-7277 due to use of default admin credentials (admin:admin). A LAN-attacker can gain administrative privileges via the web management interface, enabling full control of the device. Root cause: default credentials configured ...

CVE-2015-7283

The CVE-2015-7283 issue affects ZyXEL NBG-418N routers running firmware 1.00(AADZ.3)C0. The web management interface uses non-random default credentials (admin:1234), allowing a LAN-attacker to obtain administrative privileges via an active LAN session. Multiple connected sources confirm default ...

CVE-2015-7280

The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

[SECURITY] Fedora 23 Update: phpMyAdmin-4.5.3.1-1.fc23

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

CVE-2015-7283: Undefined Security Weakness

The web administration interface on ZyXEL NBG-418N devices with firmware 1.00AADZ.3C0 has a default password of 1234 for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...