Design/Logic Flaw

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via unknown vectors related to Wireless Framework...

CVE-2016-0533

CVE-2016-0533 concerns an unspecified vulnerability in the Oracle CRM Technical Foundation Messaging Component of Oracle E-Business Suite (versions 11.5.10.2 and 12.1.3). Based on connected CNVD-2016-00662, the issue affects the BIS Common portion of the Oracle CRM Technical Foundation and could ...

CVE-2016-0563

CVE-2016-0563 affects Oracle E-Business Suite (EBS) CRM Technical Foundation, specifically the Common Techstack component, in EBS versions 11.5.10.2 and 12.1.3. The description indicates an unspecified vulnerability that could impact confidentiality and integrity via unknown vectors related to th...

CVE-2016-0582

CVE-2016-0582 pertains to an unspecified vulnerability in the Oracle CRM Technology Foundation BIS Common Component of Oracle E-Business Suite 11.5.10.2 . The vulnerability affects integrity and is described as exploitable via vectors related to BIS Common Components, with remote access implied i...

CVE-2016-0514

CVE-2016-0514 is an unspecified vulnerability in the Oracle CRM Technical Foundation BIS Common Component of Oracle E-Business Suite 11.5.10.2. The connected records confirm the affected product and component, indicating an issue within BIS Common Components that is capable of affecting confident...

CVE-2016-0578

CVE-2016-0578 affects Oracle E-Business Suite 11.5.10.2 via the Oracle CRM Technology Foundation BIS Common Components. The vulnerability is described as unspecified, enabling remote attackers to impact confidentiality and integrity through BIS Common Components-related vectors. Root cause and ex...

CVE-2016-0515

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to BIS Common Components, a different vulnerability than CVE-2016-0514...

The vulnerability in the Microsoft SharePoint Server corporate application suite, a software solution for electronic document management called Microsoft SharePoint Foundation, allows attackers to carry out XSS attacks and circumvent existing access control policies.

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...

The vulnerability in the Microsoft SharePoint Server corporate application suite, a software solution for electronic document management called Microsoft SharePoint Foundation, allows attackers to carry out XSS attacks and circumvent existing access control policies.

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...

CVE-2016-0011

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting XSS attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different...

CVE-2015-6117

CVE-2015-6117 affects Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1. The vulnerability arises from a security feature bypass where remote authenticated users can bypass access control by modifying a webpart, enabling cross-site scripting (XSS). The issue is documented as...

Microsoft SharePoint Server and Foundation Multiple Vulnerabilities (3124585)

This host is missing an important security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

KLA10706 Potentially vulnerable Dell certificate

Microsoft updates Certificate Trust list to exclude potentially vulnerable eDellCert certificate. Via this vulnerability malicious can obtain sensitive information or bypass security restrictions. Technical details For further details about problem you can visit Dell blog entry related. And also ...

Somebody Offered Money to Raspberry Pi Foundation for Pre-Installing Malware

The Raspberry Pi is now gaining attention from malware distributors who want the popular mini-computers to deliver with pre-install malware. The Raspberry Pi Foundation has made a shocking revelation that the charitable foundation has been offered money to install malware onto the Raspberry Pi...

Dell Foundation Services安全绕过漏洞

No description provided by source...

Google Search Engine Rank Prefers HTTPS

Nothing in Google’s arsenal carries more weight than its search engine rankings. Pair that weapon with a desire to inspire encrypted connections on the web, and you have a pretty powerful combination. More than a year ago, Google said it was testing a method where a site’s search ranking would be...

Dell Foundation Services Security Bypass Vulnerability

Dell Foundation Services is the United States of America Dell Dell company's development of a core set of basic service packages provided. A security bypass vulnerability exists in Dell Foundation Services. An attacker could exploit this vulnerability to conduct a man-in-the-middle attack or...

openSUSE: Security Advisory for Security (openSUSE-SU-2015:2244-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Let's Encrypt Initiative Enters Public Beta

The Let’s Encrypt initiative reached yet another milestone this week when it entered public beta, something it claims should help make it easier for website owners to embrace HTTPS encryption. The latest step comes on the heels of the movement issuing its first certificate back in September and...

gatesfoundation.org XSS vulnerability

Vulnerable URL: http://www.gatesfoundation.org/searchq/k=%3Ajavascript%3A%2F--%3E%3C%2Ftitle%3E%3C%2Fstyle%3E%3C%2Ftextarea%3E%3C%2Fscript%3E%3C%2Fxmp%3E%3Csvg%2Fonload%3D%27%2B%2F%22%2F%2B%2Fonmouseover%3D1%2F%2B%2F%2F%2F%2Balert%28%2FXSSPOSED%2F%29%2F%2F%27%3E Details: Description| Value ---|--...