1779 matches found
CVE-2012-0543
Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration...
Design/Logic Flaw
Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration...
CVE-2012-0543
CVE-2012-0543 affects Oracle Fusion Middleware BI Publisher (XML Publisher) 10.1.3.4.1/10.1.3.4.2; an unspecified vulnerability in the BI Publisher Administration vector allows remote attackers to affect integrity. The supplied documents do not specify the root cause beyond this component, any co...
CVE-2012-0543
Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration...
WebSocket Traffic Over HTTP port
WebSocket allows bi-directional, full-duplex single socket connection between client and server...
Art And Soul Design SQL Injection
Exploit Title: Art And Soul Design SQL Injection Vulnerability Date: 18/01/2012 - 04.24 Author: 3spi0n Software Website: http://www.artandsoul.co.uk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: image.php $ Demo Sites: www.the-picture-box.co.uk/image.php?id=2" SQL...
D-Zayn Web Design Access SQL Injection
Exploit Title: D-Zayn Web Design Access SQL Injecti0n Vulnerability Date: 25/12/2011 Author: 3spi0n Software Website: http://www.d-zayn.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "created by d-zayn.com" Vulnerable File : " All Files " $ Demo Sites:...
Oracle DataDirect ODBC Drivers HOST属性arsqls24.dll栈缓冲区溢出漏洞
Oracle DataDirect是一款高性能商业的数据访问组件。 Oracle DataDirect中用于获取ODBC数据源信息的驱动程序在实现上存在栈缓冲区溢出，通过指定连接字符串中的超长HOST属性可触发此漏洞，在进行unicode/ASCII转换时，栈会完全崩溃。 Oracle Hyperion Performance Management and BI 11.1.2.1.0 厂商补丁： Oracle ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.oracle.com/technetwork/topics/security...
Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability
Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability tested against: Microsoft Windows 2k3 r2 sp2 Oracle Hyperion Performance Management and BI v11.1.2.1.0 download url of the Oracle Hyperion suite:...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security...
CVE-2011-3510
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security...
CVE-2011-3510
CVE-2011-3510 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (OBIEE) component, specifically versions 11.1.1.3.0 and 11.1.1.5.0. The vulnerability is described as an unspecified issue in the BI Platform Security area that allows remote authenticated users to im...
"SecurityTube Wi-Fi Security Expert" (SWSE) online certification Launched
"SecurityTube Wi-Fi Security Expert" SWSE online certification Launched SecurityTube released their first fully online certification today - "SecurityTube Wi-Fi Security Expert " SWSE . The most interesting thing and key difference from other certifications, is that they are giving out the entire...
Pentaho BI Server Multiple Vulnerabilities
The host is running Pentaho BI Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodpentahobiservermultvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Pentaho BI Server Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...
CVE-2009-5100
Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate attackers to obtain the password...
CVE-2009-5099
Cross-site scripting XSS vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter...
CVE-2009-5101
Pentaho BI Server 1.7.0.1062 and earlier includes the session ID JSESSIONID in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic...
Session fixation
Pentaho BI Server 1.7.0.1062 and earlier includes the session ID JSESSIONID in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic...
Default credentials
Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate attackers to obtain the password...
Cross site scripting
Cross-site scripting XSS vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter...