Design/Logic Flaw

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0518...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0517...

CVE-2016-0588

CVE-2016-0588 affects Oracle E-Business Suite 11.5.10.2, specifically the General Ledger Consolidation Hierarchy Viewer component. The vulnerability is described as unspecified with remote attackers able to affect integrity via unknown vectors related to the Consolidation Hierarchy Viewer. The co...

Oracle JRockit R28 < R28.3.9 Multiple Vulnerabilities (January 2016 CPU) (SLOTH)

The version of Oracle JRockit installed on the remote Windows host is R28 prior to R28.3.9. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Security subcomponent due to a failure to reject MD5 signatures in the server signature within the TLS 1.2...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure or increase their privileges.

The vulnerability of the Pragmatic General Multicast protocol implementation in the Windows operating system exists due to insufficient checking of resource status when resources are allowed to be shared. Exploiting this vulnerability can allow a malicious actor to increase their privileges or...

General Electric's MDS PulseNET < 3.1.5 Multiple Vulnerabilities

Binary data 9052.prm...

General Electric's MDS PulseNET Version Detection

Binary data 9051.prm...

Debian Security Advisory DSA 3441-1 (perl - security update)

David Golden of MongoDB discovered that File::Spec::canonpath in Perl returned untainted strings even if passed tainted input. This defect undermines taint propagation, which is sometimes used to ensure that unvalidated user input does not reach sensitive code. The oldstable distribution wheezy i...

General Motors: refelected Xss on https://gmid.gm.com/gmid/jsp/GMIDInitialLogin.jsp

Reflected Cross Site Scripting existed on a page of gmid.gm.com. The vulnerability has been remediated...

General Motors: gmmovinparts.com SQLi via forgot_password.jsp

The site gmmovingparts.com did not validate all user supplied input potentially allowing SQL Injection. The vulnerability has been remediated This was one of multiple SQLi on the site. A more complete PoC was done for the initial SQLi that allowed me to access the administrator portal of the site...

General Motors: XSS in GM

The site GM.com included a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

Oracle: Security Advisory (ELSA-2016-0001)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Spectrum Scale (GPFS) Hadoop Connector Vulnerable

IBM Spectrum Scale and General Parallel File System GPFS is a scalable data and file management solution based on IBM GPFS an enterprise file management system optimized for petabyte-scale storage management from IBM, USA. The solution helps customers reduce storage costs while improving security...

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System GPFS allows local users to read or write to arbitrary GPFS data via unspecified vectors...

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System GPFS allows local users to read or write to arbitrary GPFS data via unspecified vectors...

CVE-2015-7430

The IBM Spectrum Scale (GPFS) Hadoop Connector is affected by CVE-2015-7430, impacting versions 1.1.1, 2.4, 2.5, and 2.7.0-0 through 2.7.0-2. An unprivileged user could read, write, modify, or delete GPFS data via unspecified vectors. The issue is mitigated by upgrading to version 2.7.0-3. IBM pr...

UBUNTU-CVE-2015-5297

An integer overflow issue has been reported in the generalcompositerect function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code...

Oracle: Security Advisory (ELSA-2015-2636)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Security (openSUSE-SU-2015:2244-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS15-133: Security Update for Windows PGM to Address Elevation of Privilege (3116130)

The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in the Pragmatic General Multicast PGM protocol, installed with the MSMQ service, due to a race condition that can result in references being made to already freed memory. A...