CVE-2013-5425

IBM WebSphere Virtual Enterprise CVE-2013-5425 is an XSS vulnerability in the Administration Console exploitable by remote authenticated users via a crafted URL. Affected versions: VE 6.1 prior to 6.1.1.6 and VE 7.0 prior to 7.0.0.4. Mitigation: apply theFix Pack/Interim Fix PM93828. For VE 7.0, ...

PT-2013-5536

Name of the Vulnerable Software and Affected Versions IBM WebSphere Virtual Enterprise versions 6.1 through 6.1.1.6 IBM WebSphere Virtual Enterprise versions 7.0 through 7.0.0.4 Description A cross-site scripting XSS issue exists in the Administration Console, allowing remote authenticated users ...

CVE-2013-5425: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

[SECURITY] Fedora 19 Update: phpMyAdmin-3.5.8.2-1.fc19

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 18 Update: phpMyAdmin-3.5.8.2-1.fc18

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

PT-2013-5053 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.12 Description: The issue is related to multiple buffer overflows in the Linux kernel, specifically in the drivers/staging/wlags49 h2/wl priv.c file. This can be exploited by local users with the CAP NET ADMIN...

UBUNTU-CVE-2013-3630

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor...

Oracle Secure Global Desktop Administration Console Detection

Binary data oraclesecureglobaldesktophttpdetect.nbin...

Obama Administration to Review NSA Capabilities

President Barack Obama has initiated a review of the procedures and methods that the NSA uses to collect intelligence at home and overseas to ensure that the agency isn’t overstepping its bounds in phone and Internet data collection. The review comes at a time when Congress is set to consider...

Netgear Routers Open to Remote Authentication Bypass, Command Injection

There is a vulnerability in some Netgear wireless routers that allows a remote attacker to completely compromise a device and gain root privileges. The bug is trivially exploitable and the researcher who discovered it has posted a proof-of-concept exploit. The vulnerability is a command-injection...

Watchguard Extensible Threat Management (XTM) appliance version 11.7.4 contains a buffer overflow vulnerability

Overview Watchguard Extensible Threat Management XTM version 11.7.4 and possibly earlier versions contain a buffer overflow vulnerability CWE-121. Description CWE-121: Stack-based Buffer Overflow Watchguard Extensible Threat Management XTM version 11.7.4 and possibly earlier versions contain a...

CVE-2013-5865

Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect availability via unknown vectors related to Utility/User administration...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect availability via unknown vectors related to Utility/User administration...

Cisco Identity Services Engine File Space Denial of Service Vulnerability

A vulnerability in the file upload management of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to upload multiple files to a specific location of the filesystem and exhaust disk space. The vulnerability is due to insufficient management of filesystem free space...

CVE-2013-5865

CVE-2013-5865 is tied to Oracle Solaris 11.1 and affects the Utility/User administration component. The connected Nessus NASL entry for the oct2013 CPU identifies this as an easily exploitable local vulnerability that requires a login, with the potential to escalate privileges and cause a partial...

CVE-2013-5845

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Administration...

CVE-2013-5822

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Learner Administration...

Buffer overflow

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Learner Administration...

Buffer overflow

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Administration...

CVE-2013-5822

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Learner Administration...