3728 matches found
CVE-2014-8247
Cross-site scripting XSS vulnerability in CA Release Automation formerly iTKO LISA Release Automation before 4.7.1 b448 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-8246
CA Release Automation (formerly iTKO LISA Release Automation) contains a CSRF vulnerability in CVE-2014-8246 affecting versions up to 4.7.1 Build 413; 4.7.1 Build 448 fixes the issue. The vulnerability allows a remote attacker to perform privileged actions by hijacking an authenticated session vi...
CVE-2014-8248
SQL injection vulnerability in CA Release Automation formerly iTKO LISA Release Automation before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query...
CVE-2014-8247
CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 contains an XSS vulnerability (CVE-2014-8247) caused by insufficient input filtering. Remote attackers could inject arbitrary script/HTML via unspecified vectors, potentially affecting users’ sessions. CA’s security n...
CVE-2014-8248
CVE-2014-8248 is a SQL injection in CA Release Automation (formerly iTKO LISA Release Automation) affecting versions up to 4.7.1 before the b448 hotfix. The root cause is insufficient input sanitization in the query path, enabling a remote authenticated user to execute arbitrary SQL. CA issued CA...
CA LISA Release Automation contains multiple vulnerabilities
Overview CA LISA Release Automation 4.7.1.385 contains multiple vulnerabilities Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2014-8246CA LISA Release Automation 4.7.1.385 contains a global Cross-Site Request Forgery CSRF vulnerability. The application allows a malicious user to...
Multiple packages, Multiple vulnerabilities fixed in 2011
Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. FMOD Studio PEAR Mail LVM...
OracleVM 3.2 : openssl (OVMSA-2014-0039) (POODLE)
The remote OracleVM system is missing necessary patches to address critical security updates : - add support for fallback SCSV to partially mitigate CVE-2014-3566 padding attack on SSL3 - fix CVE-2014-0221 - recursion in DTLS code leading to DoS - fix CVE-2014-3505 - doublefree in DTLS packet...
OracleVM 2.2 : openssl (OVMSA-2014-0040) (POODLE)
The remote OracleVM system is missing necessary patches to address critical security updates : - add support for fallback SCSV to partially mitigate CVE-2014-3566 padding attack on SSL3 - fix CVE-2014-0221 - recursion in DTLS code leading to DoS - fix CVE-2014-3505 - doublefree in DTLS packet...
OracleVM 3.2 : onpenssl (OVMSA-2014-0008)
The remote OracleVM system is missing necessary patches to address critical security updates : - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability - replace expired GlobalSign Root CA certificate in ca-bundle.crt - fix for CVE-2013-0169 - SSL/TLS CBC timing attack 907589 - fix for CVE-2013-0166 ...
OracleVM 2.2 : openssl (OVMSA-2014-0007)
The remote OracleVM system is missing necessary patches to address critical security updates : - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability - replace expired GlobalSign Root CA certificate in ca-bundle.crt - fix for CVE-2013-0169 - SSL/TLS CBC timing attack 907589 - fix for CVE-2013-0166 ...
CA Brighstor ARCserve Backup Agent Buffer Overflow (CVE-2005-1272)
A stack based buffer overflow vulnerability exists in BrightStor ARCserve and Enterprise Backup Agent for windows. The vulnerability is caused due to a boundary error in the Backup Agents. A remote attacker can exploit this vulnerability to cause a denial of service condition or execute arbitrary...
CA eTrust PestPatrol ActiveX Control 缓冲区溢出漏洞
No description provided by source...
CA Cloud Service Management multiple security vulnerabilities
Replay-атаки, XSS, XXE, token validation vulnerability...
CVE-2014-8471
CA Cloud Service Management CSM before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors...
CVE-2014-8473
Cross-site request forgery CSRF vulnerability in CA Cloud Service Management CSM before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-8474
CA Cloud Service Management CSM before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference...
CVE-2014-8472
CA Cloud Service Management CSM before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors...
Xxe
CA Cloud Service Management CSM before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in CA Cloud Service Management CSM before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...