PT-2012-3500

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.1 Description The issue affects confidentiality and is related to the Candidate Gateway in the PeopleSoft Enterprise HRMS component. It can be exploited by remote authenticated users via unknown vectors...

CVE-2012-1748: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway, a different vulnerability than CVE-2012-0562...

CVE-2012-3801

CVE-2012-3801 is rejected/not used; it is a duplicate of CVE-2012-2704 and not an active vulnerability entry.

CVE-2012-2699

CVE-2012-2699 is a duplicate of CVE-2012-2339. Connected documents confirm a Cross-site Scripting (XSS) vulnerability in the Drupal Glossary module (6.x-1.x) prior to 6.x-1.8, where taxonomy information is not fully sanitized. Impact is remote execution of arbitrary script via UI vectors related ...

CVE-2012-2342

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-5097. Reason: This candidate is a duplicate of CVE-2010-5097. Notes: All CVE users should reference CVE-2010-5097 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2012-0562

Technical details for CVE-2012-0562 are not publicly provided in the connected documents; no affected product/component/version specifics are available here. Monitor for updates.

CVE-2012-0562

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway, a different vulnerability than CVE-2012-1748...

PT-2012-2676

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.1 Description The issue affects confidentiality and is related to the Candidate Gateway in the PeopleSoft Enterprise HRMS component. It can be exploited by remote authenticated users via unknown vectors...

CVE-2012-0562: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway, a different vulnerability than CVE-2012-1748...

Dolibarr Multiple Script URI XSS

The version of Dolibarr on the remote host fails to properly sanitize parameters in 'index.php' before using them to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this issue to inject arbitrary HTML and script code in a user'...

CVE-2006-7249

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-7250, CVE-2012-1410. Reason: this candidate was intended for one issue, but CVE users may have associated it with multiple unrelated issues. Notes: All CVE users should consult CVE-2006-7250 for the OpenSSL candidate or...

CVE-2006-7248

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-7250, CVE-2012-1410. Reason: this candidate was intended for one issue, but CVE users may have associated it with multiple unrelated issues. Notes: All CVE users should consult CVE-2006-7250 for the OpenSSL candidate or...

DDoS Attacks Hit Russian Media Sites in Advance of Elections

While Russians prepare for their presidential election on March 4, attackers already are ahead of the game, having begun a series of DDoS attacks against several media sites and at least one site belonging to a candidate. The attacks are coming from several different botnets, but so far haven’t h...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-4669. Reason: This candidate is a duplicate of CVE-2010-4669. Notes: All CVE users should reference CVE-2010-4669 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-4670, CVE-2010-4671. Reason: This candidate is a duplicate of CVE-2010-4670 and CVE-2010-4671. Notes: All CVE users should reference CVE-2010-4670 and/or CVE-2010-4671 instead of this candidate. All references and description...

CVE-2012-0026

CVE-2012-0026 is a duplicate of CVE-2012-0287. The connected records describe a WordPress 3.3.x XSS vulnerability (pre-3.3.1) that can be triggered by a crafted request, allowing arbitrary script execution in a user’s browser. Affected product: WordPress 3.3.x prior to 3.3.1. Root cause : cross-s...

CVE-2011-3527

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Candidate Gateway...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Candidate Gateway...

CVE-2011-3527

Technical details for CVE-2011-3527 are not publicly available in the provided documents. Monitor for updates.

CVE-2011-3527

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Candidate Gateway...