EUVD-2013-4331

Malware in sbrugna...

RHSA-2014:0440 Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.5 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2013:1294 Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.4 security update

Bulletin has no description...

RHSA-2013:0564 Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.3 security update

Bulletin has no description...

RHEL 6 : Red Hat Enterprise MRG Grid 2.2 (RHSA-2012:1281)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1281 advisory. Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased...

CVE-2013-4414

Cross-site scripting XSS vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form...

CVE-2013-4405

Multiple cross-site request forgery CSRF vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for unspecified requests...

CVE-2013-4461

CVE-2013-4461 is a SQL injection vulnerability in the cumin web interface of Red Hat Enterprise MRG Grid 2.4. The issue arises from how cumin parses POST request data, allowing a remote attacker (authenticated) to perform SQL injection against cumin’s database. Affected component: cumin in MRG Gr...

CVE-2013-4414

Cross-site scripting XSS vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form...

CVE-2013-4461

SQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to execute arbitrary SQL commands via vectors related to the "filtering table operator."...

PT-2013-5001

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise MRG Grid version 2.4 Description The issue allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations. Recommendations For Red Hat Enterprise MRG...

CVE-2013-4414: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form...

CVE-2013-4404: Undefined Security Weakness

cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors...

PT-2013-5027

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise MRG Grid version 2.4 Description A SQL injection issue exists in the web interface for cumin, allowing remote attackers to execute arbitrary SQL commands. This is related to vectors involving the "filtering table operator."...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.4 security update

Updated Grid component packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common...

Important: Red Hat Security Advisory: mongodb and pymongo security and enhancement update

Updated mongodb and pymongo packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...