Oracle Enterprise Manager Grid Control Multiple Vulnerabilities (April 2017 CPU) (SWEET32)

The version of Oracle Enterprise Manager Grid Control installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in the OpenSSL component in s3srvr.c, sslsess.c, and t1lib.c due to improper use of...

Moderate: Red Hat Security Advisory: Red Hat JBoss Data Grid 7.1

Red Hat JBoss Data Grid 7.1 is now available for download from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Fedora 24 : webkitgtk4 (2017-0f38995622)

Highlights of the 2.16.0 release : - Hardware acceleration is now enabled on demand to drastically reduce memory consumption. - CSS Grid Layout is enabled by default. - New WebKitSetting to set the hardware acceleration policy. - UI process API to configure network proxy settings. - Improved...

Fedora 25 : webkitgtk4 (2017-25ffd5b236)

Highlights of the 2.16.0 release : - Hardware acceleration is now enabled on demand to drastically reduce memory consumption. - CSS Grid Layout is enabled by default. - New WebKitSetting to set the hardware acceleration policy. - UI process API to configure network proxy settings. - Improved...

XSS via Angular Expression

Overview Affected versions of ag-grid are vulnerable to Cross-site Scripting XSS via Angular Expressions, if used in combination with AngularJS. Recommendation Avoid using ag-grid in combination with AngularJS until a fix is available. References - Issue 1287 -...

espanol.nationalgridus.com Open Redirect vulnerability

Vulnerable URL: https://espanol.nationalgridus.com/nationalgrid/enes/?1023749633;http://openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:29 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

Squirrels, Not Hackers, Pose Biggest Threat to Electric Grid

SAN FRANCISCO–The crown jewel of North America’s critical infrastructure is its electric grid. A successful cyberattack on it would be devastating. But according to Marcus Sachs, CSO with the North American Electric Reliability Corporation NERC, fears of a cyberattack are overblown. Sachs told RS...

Joomla JE Grid Folio SQL Injection

Exploit Title: Joomla! Component JE Grid Folio - SQL Injection Google Dork: inurl:index.php?option=comjegridfolio Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: http://www.joomlaextension.biz/demo/index.php?option=comjegridfolio Demo:...

Joomla! Component JE Grid Folio - id SQL Injection

Joomla! Component JE Grid Folio - id SQL Injection Exploit Title: Joomla! Component JE Grid Folio - SQL Injection Google Dork: inurl:index.php?option=comjegridfolio Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

CVE-2017-3311

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-3311

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

Design/Logic Flaw

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-3311

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-3311

The CVE-2017-3311 entry affects Oracle Enterprise Manager Grid Control, specifically the Application Testing Suite component (Test Manager for Web Apps). Affected versions are 12.5.0.3, 12.5.0.2, and 12.4.0.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to co...

CVE-2017-3311

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

Vermont Grid 'Hack' Latest Tumble Down Attribution Rabbit Hole

A Vermont utility was for a brief moment last week at the center of a geopolitical scandal in which the Russian government was implicated in an attack against a U.S. electric grid. As it turns out, a laptop at Burlington Electric Department was infected with the Neutrino Exploit Kit. There was no...

WordPress Post Grid Plugin <= 2.0.12 - Arbitrary File Deletion

This plugin is prone to an arbitrary file deletion vulnerability. Solution Update the plugin...

Post Grid <= 2.0.12 - Unauthenticated Arbitrary File Deletion

The Post Grid WordPress plugin was affected by an Unauthenticated Arbitrary File Deletion security vulnerability...

CVE-2016-5604

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563...

CVE-2016-5604

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563...