Unspecified Vulnerability in Oracle E-Business Suite Oracle Human Resources General utilities Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Human Resources General utilities component, which allows remote attackers to exploit the vulnerability to submit special requests to...

General Motors: XSS on gmchat.gm.com

A specific page on gmchat.gm.comincluded a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

CVE-2016-0588

Unspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Consolidation Hierarchy Viewer...

CVE-2016-0588

Unspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Consolidation Hierarchy Viewer...

Design/Logic Flaw

Unspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Consolidation Hierarchy Viewer...

CVE-2016-0517

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0518...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0518...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to General utilities, a different vulnerability than CVE-2016-0517...

CVE-2016-0588

CVE-2016-0588 affects Oracle E-Business Suite 11.5.10.2, specifically the General Ledger Consolidation Hierarchy Viewer component. The vulnerability is described as unspecified with remote attackers able to affect integrity via unknown vectors related to the Consolidation Hierarchy Viewer. The co...

Oracle JRockit R28 < R28.3.9 Multiple Vulnerabilities (January 2016 CPU) (SLOTH)

The version of Oracle JRockit installed on the remote Windows host is R28 prior to R28.3.9. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Security subcomponent due to a failure to reject MD5 signatures in the server signature within the TLS 1.2...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure or increase their privileges.

The vulnerability of the Pragmatic General Multicast protocol implementation in the Windows operating system exists due to insufficient checking of resource status when resources are allowed to be shared. Exploiting this vulnerability can allow a malicious actor to increase their privileges or...

General Electric's MDS PulseNET Version Detection

Binary data 9051.prm...

General Electric's MDS PulseNET < 3.1.5 Multiple Vulnerabilities

Binary data 9052.prm...

Debian Security Advisory DSA 3441-1 (perl - security update)

David Golden of MongoDB discovered that File::Spec::canonpath in Perl returned untainted strings even if passed tainted input. This defect undermines taint propagation, which is sometimes used to ensure that unvalidated user input does not reach sensitive code. The oldstable distribution wheezy i...

General Motors: refelected Xss on https://gmid.gm.com/gmid/jsp/GMIDInitialLogin.jsp

Reflected Cross Site Scripting existed on a page of gmid.gm.com. The vulnerability has been remediated...

General Motors: gmmovinparts.com SQLi via forgot_password.jsp

The site gmmovingparts.com did not validate all user supplied input potentially allowing SQL Injection. The vulnerability has been remediated This was one of multiple SQLi on the site. A more complete PoC was done for the initial SQLi that allowed me to access the administrator portal of the site...

General Motors: XSS in GM

The site GM.com included a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

Oracle: Security Advisory (ELSA-2016-0001)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Spectrum Scale (GPFS) Hadoop Connector Vulnerable

IBM Spectrum Scale and General Parallel File System GPFS is a scalable data and file management solution based on IBM GPFS an enterprise file management system optimized for petabyte-scale storage management from IBM, USA. The solution helps customers reduce storage costs while improving security...

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System GPFS allows local users to read or write to arbitrary GPFS data via unspecified vectors...