CVE-2013-1185: Exposure of Sensitive Information to an Unauthorized Actor

The web interface in the Manager component in Cisco Unified Computing System UCS 1.x and 2.x before 2.02m allows remote attackers to obtain sensitive information by reading a 1 technical-support bundle file or 2 on-device configuration backup, aka Bug ID CSCtq86543...

Russian Underground Cybercrime market offering sophisticated services

Security firm Trend Micro recent analyses the Russian crimeware markets and has found that malware tools and services range from one-time packages which cost just pennies to sophisticated packages and services which cost purchasers thousands of dollars per month. If you want to buy a botnet it wi...

CVE-2012-2073

The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbitrary PHP code via unspecified vectors...

PT-2012-3787

Name of the Vulnerable Software and Affected Versions Drupal Bundle copy module versions 7.x-1.x before 7.x-1.1 Description The issue allows remote authenticated users with certain permissions to execute arbitrary PHP code. This is due to the module not checking for the use PHP for settings...

CVE-2012-2073: Undefined Security Weakness

The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbitrary PHP code via unspecified vectors...

SA-CONTRIB-2012-046 - Bundle Copy - Arbitrary Code execution

CVE: CVE-2012-2073 Bundle copy is a replacement for the Content copy module which lives in the CCK project for Drupal 6. Besides the ability to import and export content types, taxonomy and user entities are also supported. Field groups can be exported easily as well. The module doesn't...

Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

"There is an EVIL bug in at least the Linux 2.2.35-8 Tor Browser Bundle start-tor-browser script. It will log things like domain names to a file in the root of the browser bundle." https://trac.torproject.org/projects/tor/ticket/5417 Ticket 5417 new defect RelativeLink.sh in Tor browser bundle ha...

PT-2011-5177

Name of the Vulnerable Software and Affected Versions Drupal Meta tags quick module versions 7.x-2.x before 7.x-2.3 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors,...

ca_root_nss -- extraction of explicitly-untrusted certificates into trust bundle

Matthias Andree reports that the ca-bundle.pl used in older versions of the carootnss FreeBSD port before 3.12.11 did not take the Mozilla/NSS/CKBI untrusted markers into account and would add certificates to the trust bundle that were marked unsafe by Mozilla...

DSA-2299-1 ca-certificates - untrusted root CA

Bulletin has no description...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 Bundle 17 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance...

CVE-2011-0858

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle 15 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager...

CVE-2011-0850

Unspecified vulnerability in Oracle PeopleSoft Enterprise CRM 8.9 Bundle 41 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Order Capture...

CVE-2011-0828

Unspecified vulnerability in Oracle PeopleSoft Enterprise 8.8 Bundle 13 allows remote attackers to affect integrity via unknown vectors related to Application Portal...

Design/Logic Flaw

Unspecified vulnerability in Oracle PeopleSoft Enterprise 8.8 Bundle 13 allows remote attackers to affect integrity via unknown vectors related to Application Portal...

Design/Logic Flaw

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle 15 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Pension Administration...

Design/Logic Flaw

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance...

CVE-2011-0857

Technical details about CVE-2011-0857 are not publicly provided in the supplied documents; information on affected components, exploit vectors, and fixes is not available here. Monitor for updates.

CVE-2011-0828

CVE-2011-0828 affects Oracle PeopleSoft Enterprise 8.8 Bundle #13. The description states an unspecified vulnerability allowing remote attackers to affect integrity via unknown vectors related to the Application Portal. CVSSv2 base score 4.3 (AV:N/AC:M/Au:N/C:P/I:P/A:N). No exploitation details, ...

CVE-2011-0828: Undefined Security Weakness

Unspecified vulnerability in Oracle PeopleSoft Enterprise 8.8 Bundle 13 allows remote attackers to affect integrity via unknown vectors related to Application Portal...