The vulnerability of the Console sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows a perpetrator to gain full control over the application.

The vulnerability of the Console sub-component of the Oracle WebLogic Server application server software, part of the Oracle Fusion Middleware platform, is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control...

The vulnerability of the OSCommand Console and the GPA_ADMIN transaction of the SAP Diagnostic Agent allows a perpetrator to execute arbitrary code.

The vulnerability of the OSCommand Console and the GPAADMIN transaction of the SAP Diagnostic Agent exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ZyXEL GS1900 Input Validation Error Vulnerability

ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to version 2.50AAHH.0C0. The vulnerability can be exploited by an attacker to access the password recovery menu via the serial console...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2019-4442)

Summary WebSphere Application Server is shipped with IBM Tivoli System Automation Application Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

CVE-2019-15804

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. By sending a signal to the CLI process, undocumented functionality is triggered. Specifically, a menu can be triggered by sending the SIGQUIT signal to the CLI application e.g., through CTRL+\ via SSH. The access...

CVE-2019-15804

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. By sending a signal to the CLI process, undocumented functionality is triggered. Specifically, a menu can be triggered by sending the SIGQUIT signal to the CLI application e.g., through CTRL+\ via SSH. The access...

Protect

Improper permission or value checking in the CLI console may allow a non-privileged user to obtain plaint text private keys of system's builtin local certificates via unsetting the keys encryption password or for user uploaded local certificates via setting an empty password. Note that backed up...

UBUNTU-CVE-2010-4664

In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session...

CVE-2009-4011

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...

CVE-2009-4011

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...

Race condition

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...

CVE-2009-4011

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...

CVE-2009-4011

Removed by vendor...

CVE-2009-4011

dtc-xen is a SOAP daemon used for Xen VM management. The CVE-2009-4011 issue is a race condition in dtc-xen 0.5.x before 0.5.4, caused by mishandling of concurrent access to shared resources, enabling an attacker to gain a bash shell as the xenXX user on dom0 and potentially reuse an already open...

October Release: Q&A with Ari Weil

Shortly after Akamai announced the October 2019 Release with new features and capabilities across its security, performance and media product lines, Akamai's VP of Product Marketing, Ari Weil, took over Akamai's Twitter account for a live October Release Q&A. For those that missed the live event,...

Magento cross-site scripting vulnerability (CNVD-2019-40736)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A cross-site scripting vulnerability exists in Magento. An attacker can exploit this vulnerability to inject malicious JavaScript into the management console cache...

CVE-2010-4178

MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...

CVE-2010-4178

MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...

CVE-2010-4178

MySQL-GUI-tools mysql-administrator leaks passwords into process list after with launch of mysql text console...

PT-2019-5697 · Red Hat · Cloudforms Management Engine

Name of the Vulnerable Software and Affected Versions: CloudForms Management Engine versions 5.10 through 5.11 Description: The issue is related to insufficient input validation, allowing a remote attacker to elevate privileges to root level and execute arbitrary code. An attacker logged into the...