CVE-2015-5050

Cross-site request forgery CSRF vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote authenticated users to hijack the authentication of...

CVE-2015-5042

CVE-2015-5042 affects IBM Emptoris Contract Management. Multiple product lines are impacted: 9.5.0.x before 9.5.0.6 iFix15; 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5; 10.0.2.x before 10.0.2.7 iFix4; and 10.0.4.x before 10.0.4.0 iFix3. The vulnerability allows remote attackers to execute arbitra...

Bitcoin Creator 'Satoshi Nakamoto' Unmasked! An Australian Man 'Craig Wright' identified...

Breaking Update: Police Raid alleged Bitcoin Creator Craig Wright's Home in Sydney. Yes, Satoshi Nakamoto, the mysterious creator of the Bitcoin digital cryptocurrency has possibly been identified as an Australian entrepreneur, according to investigations independently done by Wired and Gizmodo...

Threat Outbreak Alert RuleID19854: Email Messages Distributing Malicious Software on December 7, 2015

Medium Alert ID: 42484 First Published: 2015 December 3 14:04 GMT Last Updated: 2015 December 9 13:35 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19854...

OPM Hack Victims Still Haven't Been Notified

Millions of government workers whose information was implicated in this year’s expansive Office of Personnel Management hack still haven’t been notified, the agency revealed this week. The agency announced Tuesday that it would contact 21.5 million federal employees and contractors “later this...

Junos Operating System On Extended Support

According to its version, the remote Junos operating system has transitioned to an extended portion in its support life cycle. Continued access to new security updates requires a support service contract; without one, the host likely will be missing security updates. C Tenable Network Security,...

Threat Outbreak Alert RuleID16746: Email Messages Distributing Malicious Software on July 17, 2015

Medium Alert ID: 40022 First Published: 2015 July 17 20:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16746 may contain the following files: Name | Siz...

ManageEngine Asset Explorer v6.1 - Persistent Vulnerability

Document Title: =============== ManageEngine Asset Explorer v6.1 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1488 Release Date: ============= 2015-06-22 Vulnerability Laboratory ID VL-ID: ===================================...

ManageEngine Asset Explorer v6.1 - Persistent Vulnerability

Document Title: =============== ManageEngine Asset Explorer v6.1 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1488 Release Date: ============= 2015-06-22 Vulnerability Laboratory ID VL-ID: ===================================...

SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities

Exploit for multiple platform in category web applications Document Title: =============== SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities Product & Service Introduction: =============================== The integrated customer management, digital customer file is the central record for a sing...

XML External Entity Information Disclosure Vulnerability in Multiple IBM Products

IBM Emptoris Contract Management software is a solution that automates the contract lifecycle. An XML external entity information disclosure vulnerability exists in multiple IBM products, which can be exploited by attackers to access sensitive information...

Xxe

The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix2, 10.0.0.x before 10.0.0.1 iFix1, 10.0.1.x before 10.0.1.3 iFix1, and 10.0.2...

CVE-2014-8668

SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8668

CVE-2014-8668 is a reported SQL injection vulnerability in SAP Contract Accounting . The available documents describe that remote attackers could execute arbitrary SQL commands via unspecified vectors, but do not provide details on affected SAP versions, specific vulnerable components, exploit me...

CVE-2014-8668

SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Threat Outbreak Alert RuleID11574: Email Messages Distributing Malicious Software on September 16, 2014

Medium Alert ID: 35728 First Published: 2014 September 16 16:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11574 may contain the following files: Name ...

CVE-2014-3034

Cross-site scripting XSS vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Sql injection

SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3041

SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...