CVE-2009-5012: Undefined Security Weakness

ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session...

CVE-2010-2391: Undefined Security Weakness

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-2417: Undefined Security Weakness

Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.0.0 allows remote authenticated users to affect integrity via unknown vectors...

Proventia Network Mail Security System Insecure Direct Object Reference

Security Advisory: MVSA-10-008 / CVE-2010-0154 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: Insecure Direct Object Reference Risk: Medium Attack Vector: From Remote Authentication: Required Reference: http://www.ventuneac.net/security-advisories/MVSA-10-008...

CVE-2010-1548: Undefined Security Weakness

The auto-complete functionality in the Chaos Tool Suite aka CTools module 6.x before 6.x-1.4 for Drupal does not follow access restrictions, which allows remote authenticated users, with "access content" privileges, to read the title of an unpublished node via a q=ctools/autocomplete/node/ value...

CVE-2010-0885: Undefined Security Weakness

Unspecified vulnerability in the Sun Java System Communications Express component in Oracle Sun Product Suite 6 2005Q4 6.2 and and 6.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Address Book...

CVE-2005-4884: Undefined Security Weakness

Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 10g allows remote authenticated attackers to affect availability via unknown vectors, aka DB02...

CVE-2009-3921: Undefined Security Weakness

The Smartqueueog module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances involving subqueue creation, which allows remote authenticated users to discover arbitrary organic group names by reading confirmation message...

CVE-2009-1994: Undefined Security Weakness

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVTCMTCBK...

FtpXQ FTP Server 3.0 - (Authenticated) Remote Denial of Service

FtpXQ FTP Server 3.0 - Authenticated Remote Denial of Service !/usr/bin/python print "" print " Iranian Pentesters Home " print " Www.Pentesters.Ir " print " PLATEN - H.jafari - " print " FtpXQ FTP Server 3.0 Remote Denial Of Service Exploit " print " author: PLATEN " print " E-mail && blog: "...

Adobe JRUN Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-051 Application: Adobe JRun Application Server Versions Affected: 4 updater 7 Vendor URL: http://www.adobe.com/products/jrun/ Bug: Directory Traversal File Read Exploits: YES Reported: 20.01.2009 Vendor response: 21.01.2009 Solution: YES...

CVE-2009-0588: Undefined Security Weakness

agent/request/op.cgi in the Registration Authority RA component in Red Hat Certificate System RHCS 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field...

CVE-2009-0715: Undefined Security Weakness

Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated users to obtain "access" or "extended privileges" via unknown vectors...

CVE-2009-0980: Undefined Security Weakness

Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affect integrity and availability, related to AGGXQIMP...

CVE-2009-0998: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-0997: Undefined Security Weakness

Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, related to DBMSSYSSQL...

CVE-2008-6524: Undefined Security Weakness

resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords without authentication...

CVE-2008-4014: Undefined Security Weakness

Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Application Server allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2008-5436: Undefined Security Weakness

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors...

CVE-2008-5678: Improper Input Validation

Fretwell-Downing Informatics FDI OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the 1 getsettings.ini, 2 setup.ini, and 3 text.ini files...