CVE-2013-5540

CVE-2013-5540 affects Cisco Identity Services Engine (ISE) file-upload management. The issue allows an authenticated remote attacker to upload multiple files, exhausting disk space and causing denial of service by making the administration interface unresponsive. Root cause is insufficient manage...

PT-2013-4653

Name of the Vulnerable Software and Affected Versions Oracle Retail Invoice Matching versions 10.2 through 13.2 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to System Administration. Recommendations For...

CVE-2013-5822: Undefined Security Weakness

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Learner Administration...

CVE-2013-5865: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect availability via unknown vectors related to Utility/User administration...

PT-2013-5861

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.1 Description The issue affects the availability of the system, related to Utility/User administration, and can be exploited by local users via unknown vectors. Recommendations For Oracle Solaris version 11.1, at the...

CVE-2013-5845: Undefined Security Weakness

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Administration...

PT-2013-5621

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description The issue concerns the file-upload feature, which allows remote authenticated users to cause a denial of service. This can lead to disk consumption and an...

CVE-2013-3814: Undefined Security Weakness

Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to System Administration...

CVE-2013-5540: Undefined Security Weakness

The file-upload feature in Cisco Identity Services Engine ISE allows remote authenticated users to cause a denial of service disk consumption and administration-interface outage by uploading many files, aka Bug ID CSCui67519...

PT-2013-5824

Name of the Vulnerable Software and Affected Versions Oracle iLearning versions 5.2.1 through 6.0 Description The issue affects confidentiality, integrity, and availability. It is related to Learner Administration in the Oracle iLearning component. The exact vectors of the issue are unknown...

PT-2013-5845

Name of the Vulnerable Software and Affected Versions Oracle iLearning versions 5.2.1 and 6.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Learner Administration in the Oracle iLearning component. Recommendations...

Hewlett-Packard Intelligent Management Center SOM euAccountService Servlet Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOM's euAccountService servlet. No authentication is required to...

[SECURITY] Fedora 20 Update: glpi-0.84.2-1.fc20

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Graphical Interface for Powershell Scripts: PoshSec Framework

The PoshSec Framework is a tool that is designed to provide a graphical interface for powershell scripts, funcions, modules and cmdlets The PoshSec Framework is not merely a defense tool. It can be used for offense, defense, and even system administration. The whole idea is to give people a tool...

Debian Security Advisory DSA 2775-1 (ejabberd - insecure SSL usage)

It was discovered that ejabberd, a Jabber/XMPP server, uses SSLv2 and weak ciphers for communication, which are considered insecure. The software offers no runtime configuration options to disable these. This update disables the use of SSLv2 and weak ciphers. The updated package for Debian 7 whee...

[PoshSec Framework v0.2] Graphical Interface for Powershell scripts

The PoshSec Framework is a tool that is designed to provide a graphical interface for powershell scripts, functions, modules, and cmdlets. It allows the community to write scripts that can interact with the interface by providing alerts, and output directly from their powershell scripts. This...

Cisco Releases Security Advisory for Cisco IOS XR

Cisco has released a security advisory to address a vulnerability in Cisco IOS XR Software version 4.3.1. If successful, this exploitation could result in complete packet memory exhaustion, rendering critical services on the affected device unable to allocate packets, resulting in a denial of...

RHEL 5 : sudo (RHSA-2013:1353)

An updated sudo package that fixes multiple security issues and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2013-5692

Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php/admin/translationManager...

CVE-2013-5964

Cross-site scripting XSS vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web script or HTML via the flag title...