9332 matches found
CVE-2013-2974
The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager TADDM 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges, and consequently create or delete reports or conduct SQL injection attacks, via crafted...
Authorization
The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager TADDM 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges, and consequently create or delete reports or conduct SQL injection attacks, via crafted...
LinPHA 1.3.4 - Multiple Vulnerabilities
LinPHA 1.3.4 - Multiple Vulnerabilities Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Teste...
PT-2014-2643
Name of the Vulnerable Software and Affected Versions IBM Tivoli Application Dependency Discovery Manager TADDM versions 7.2.1.x through 7.2.1.4 Description The issue allows remote authenticated users to bypass authorization checks, obtaining report-administration privileges. This can lead to...
LinPHA 1.3.4 - Multiple Vulnerabilities
Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Tested on: Virtualbox debian and Apache ===...
XtremeRAT Malware Used in Targeted Attacks Against Israel
Espionage malware used in attacks against Israel, as well as Syrian activists, in the last 18 months has been linked to a new attack against Israel’s Civil Administration, the country’s governing body in the West Bank. Researchers at Seculert reported today that samples of XtremeRAT, a...
Oracle iPlanet Web Proxy Server 4.0 < 4.0.23 Unspecified Vulnerability
The remote host has a version of Oracle iPlanet Web Proxy Server formerly Sun Java System Web Proxy Server 4.0 prior to 4.0.23. It is, therefore, affected by an unspecified vulnerability related to Administration. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72035;...
Ajenti 1.2.13 Cross Site Scripting
Exploit Title: Ajenti - Stored Persistent Cross Site Scripting Vulnerability Date: 16/01/2014 Exploit Author: projectzero labs Vendor Homepage: http://www.ajenti.org Vendor Informed: 14/01/2014 Software Link: http://www.ajenti.org Version: 1.2.13 Tested on: Kali Linux / Iceweasel v.22 About the...
CVE-2013-5808
Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...
Design/Logic Flaw
Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...
CVE-2014-0419
Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...
CVE-2014-0367
Unspecified vulnerability in the Hyperion Essbase Administration Services component in Oracle Hyperion 11.1.2.1, 11.1.2.2, and 11.1.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...
Design/Logic Flaw
Unspecified vulnerability in the Hyperion Essbase Administration Services component in Oracle Hyperion 11.1.2.1, 11.1.2.2, and 11.1.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console...
CVE-2014-0419
Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...
CVE-2014-0419
CVE-2014-0419 concerns the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization SGD, affected in versions before 4.63 (with December 2013 PSU), 4.71, and 5.0/5.10 (with December 2013 PSU). The vulnerability is described as unspecified, enabling remote attackers to affect confiden...
CVE-2013-5808
Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...
PT-2014-3595
Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.1 through 11.1.2.3 Description The issue affects the confidentiality and integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Admin Console in the Hyperio...
CVE-2014-0419: Undefined Security Weakness
Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...
CVE-2013-5808: Undefined Security Weakness
Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...