Design/Logic Flaw

The Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to read web dispatcher and security trace files and possibly obtain passwords via unspecified vectors, aka SAP Security Note 2148854...

Memory corruption

SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to cause a denial of service memory corruption and indexserver crash via unspecified vectors to the EXECUTESEARCHRULESET stored procedure, aka SAP Security Note 2175928...

Design/Logic Flaw

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397...

CVE-2015-7991

The Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to read web dispatcher and security trace files and possibly obtain passwords via unspecified vectors, aka SAP Security Note 2148854...

CVE-2015-7992

SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) is affected by CVE-2015-7992. Remote authenticated users can trigger a denial of service (memory corruption and indexserver crash) by calling the EXECUTE_SEARCH_RULE_SET stored procedure, per SAP Security Note 2175928. Exploitation details and exact ve...

CVE-2015-7993

CVE-2015-7993 affects SAP HANA DB Extended Application Services (XS/XS Engine) in version 1.00.73.00.389160 (NewDB100_REL). The vulnerability enables remote arbitrary code execution via unspecified vectors related to HTTP Login (SAP Security Note 2197397). The connected sources confirm the affect...

CVE-2015-7993

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397...

CVE-2015-7994

The SQL interface in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to execute arbitrary code via unspecified vectors related to "SQL Login," aka SAP Security Note 2197428...

CVE-2015-7992

SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to cause a denial of service memory corruption and indexserver crash via unspecified vectors to the EXECUTESEARCHRULESET stored procedure, aka SAP Security Note 2175928...

IBM System Networking Switch Center DB Service Remote Elevation of Privilege Vulnerability

This vulnerability allows remote attackers to disclose information on vulnerable installations of IBM System Networking Switch Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IBM SNSC DB Service, that listens by default on port 40999. This...

Milton Webdav 2.7.0.1 XXE Injection Vulnerability

Milton Webdav version 2.7.0.1 suffers from an XXE injection vulnerability. I've recently found vulnerability in Milton Webdav 2.7.0.1 project page - http://milton.io/. Milton Webdav is a Java library for adding webdav capabilities to your applications. Milton Webdav supports PROPFIND, PROPPATCH a...

XPL-SEARCH - Search Exploits In Multiple Exploit Databases

XPL SEARCH Search exploits in multiple exploit databases! Exploit databases available: Exploit-DB MIlw0rm PacketStormSecurity IntelligentExploit IEDB CVE TO RUN THE SCRIPT PHP Version cli 5.5.8 or higher php5-cli Lib cURL support Enabled php5-curl Lib cURL Version 7.40.0 or higher allowurlfopen O...

AlienVault OSSIM 4.3 Cross Site Request Forgery

Exploit Title: AlienVault - ossim CSRF Date: 10-5-2015 Exploit Author: MohamadReza Mohajerani Vendor Homepage: www.alienvault.com Software Link: https://www.alienvault.com/products/ossim Version: Tested on 4.3 Vulnerability Details: ===================== Multiple CSRF vectors exists within...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2015-06830)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An unspecified vulnerability exists in Oracle E-Business Suite 11.5.10.2. Allows an authenticated remote user to affect availability via unspecified vectors associated with the DB listener in...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than CVE-2015-4798...

CVE-2015-4839

CVE-2015-4839 affects Oracle E-Business Suite 11.5.10.2, specifically the Oracle Applications Technology Stack, with the vulnerability tied to the DB Listener. The description indicates an unspecified vulnerability that could impact confidentiality, integrity, and availability via unknown vectors...

CVE-2015-4798

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than CVE-2015-4839...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than CVE-2015-4839...

CVE-2015-4798

Technical details for CVE-2015-4798 are not publicly available in the provided documents. Monitor for updates from official advisories.

Oracle E-Business Multiple Vulnerabilities (October 2015 CPU)

The version of Oracle E-Business installed on the remote host is missing the October 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - An unspecified flaw exists in the Online Patching subcomponent in the Applications DBA. An...