CVE-2011-4818: Improper Input Validation

Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the uisessionid parameter to an unspecified component...

PT-2012-1965

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management and Asset Management Essentials versions 6.2, 7.1, and 7.5 Description The issue allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the uisessionid parameter ...

Google Pushes Update For Chrome to Fix Faulty Microsoft Malware Detection

Google has pushed out an update for its Chrome browser that fixes a problem caused by the incident last week in which Microsoft Security Essentials mistakenly detected the browser as the Zeus bot and removed it from some machines. The update should automatically fix any damaged Chrome...

Microsoft Pushes Emergency Update After Security Products Call Chrome "Banking Trojan"

Microsoft was forced to push out an emergency update to its Security Essentials and Forefront products Friday after users complained that an updated virus signature intended to spot the Zeus Trojan was, instead, flagging and even removing instances of Google’s Chrome Web browser. The fireworks...

Code injection

Unspecified vulnerability in HP Business Service Automation BSA Essentials 2.01 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-2412

CVE-2011-2412 affects HP Business Service Automation (BSA) Essentials v2.01. The HP Security Bulletin documents a remote code execution vulnerability with CVSS 2.0 base vector AV:N/AC:L/Au:N/C:C/I:C/A:C and base score 10.0, indicating a critical impact. The vulnerability allows remote attackers t...

CVE-2011-2412

Unspecified vulnerability in HP Business Service Automation BSA Essentials 2.01 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-2412: Undefined Security Weakness

Unspecified vulnerability in HP Business Service Automation BSA Essentials 2.01 allows remote attackers to execute arbitrary code via unknown vectors...

PT-2011-3840

Name of the Vulnerable Software and Affected Versions HP Business Service Automation BSA Essentials version 2.01 Description The issue allows remote attackers to execute arbitrary code. The exact vectors used for the attack are not specified. Recommendations For HP Business Service Automation BSA...

[security bulletin] HPSBMU02705 SSRT100622 rev.1 - HP Business Service Automation (BSA) Essentials, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03014398 Version: 1 HPSBMU02705 SSRT100622 rev.1 - HP Business Service Automation BSA Essentials, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be...

CVE-2011-0037

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool MSRT, Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted val...

Code injection

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool MSRT, Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted val...

CVE-2011-0037

CVE-2011-0037 affects Microsoft Malware Protection Engine (MMPE) prior to 1.1.6603.0, used in MSRT, Windows Defender, Security Essentials, Forefront products, and related tools. The vulnerability allows local privilege escalation through a crafted value of an unspecified user registry key. The do...

CVE-2011-0037

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool MSRT, Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted val...

PT-2011-2034

Name of the Vulnerable Software and Affected Versions Microsoft Malware Protection Engine versions prior to 1.1.6603.0 Microsoft Malicious Software Removal Tool MSRT affected versions not specified Windows Defender affected versions not specified Security Essentials affected versions not specifie...

CVE-2011-0037: Improper Input Validation

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool MSRT, Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted val...

Stack overflow

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and...

HP Storage Essentials unauthorized access

Unauthorized access if LDAP is used...

[security bulletin] HPSBST02595 SSRT1000303 rev.1 - HP Storage Essentials Using LDAP, Remote Unauthenticated Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02552030 Version: 1 HPSBST02595 SSRT1000303 rev.1 - HP Storage Essentials Using LDAP, Remote Unauthenticated Access NOTICE: The information in this Security Bulletin should be acted upon as soon ...

CVE-2010-4029

Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...