CVE-2015-4735

CVE-2015-4735 affects Oracle Enterprise Manager Grid Control (RAC Management) in EM Base Platform 11.1.0.1 and EM DB Control 11.2.0.3/11.2.0.4. The vulnerability allows remote, unauthenticated access via HTTP to read a subset of data, compromising confidentiality. Public sources in connected docu...

PT-2015-5807

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform version 11.1.0.1 Oracle EM Plugin for DB versions 12.1.0.5 through 12.1.0.7 Oracle EM DB Control versions 11.1.0.7, 11.2.0.3, 11.2.0.4 Description The issue affects confidentiality and...

CVE-2015-4735: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management...

CVE-2015-2646: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5, 12.1.0.6, 12.1.0.7; EM DB Control: 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote attackers to affect integrity via...

CVE-2015-2647: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect...

The Triumphant Finale of CSI: Cyber

It’s been a couple of months since we left our heroes on CSI: Cyber, and boy, have they been busy. They have apparently solved many crimes using cyber-sleuthing, acquired some decidedly non-cyber firearms skills, and, in the case of our man Krumitz, taken up running. We wanted to check in and see...

Open Smart Grid Protocol Alliance Plan to Fix its Weak Crypto

The Open Smart Grid Protocol Alliance, which recently came under fire for a weak crypto implementation in its protocol, will upgrade existing devices, likely starting in September. Harry Crijns, secretary of the OSGP Alliance in The Netherlands, said fixes have been developed and are “under a...

Open Smart Grid Protocol Homegrown Crypto Weaknesses

In the three years since its inception, the Open Smart Grid Protocol has found its way into more than four million smart meters and similar devices worldwide. And like its SCADA, industrial control system, and embedded system brethren, it’s rife with security issues. Two researchers, Phillip...

Magento Community Edition and Enterprise Edition SQL Injection Vulnerabilities

Magento is a professional open-source PHP e-commerce system from Magento, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A SQL injection vulnerability exists in t...

PT-2015-5264

Name of the Vulnerable Software and Affected Versions Magento Community Edition CE version 1.9.1.0 Magento Enterprise Edition EE version 1.14.1.0 Description The issue allows remote administrators to execute arbitrary SQL commands. This is achieved via the popularityfield expr parameter when eith...

Oracle Enterprise Manager Cloud Control Unspecified Vulnerability (April 2015 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by an unspecified flaw in the My Oracle Support Plugin subcomponent of the Enterprise Manager Base Platform component. A remote attacker can exploit this to impact the integrity of the system. Note tha...

CVE-2015-0473

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1.0.6 allows remote attackers to affect integrity via unknown vectors related to My Oracle Support Plugin...

CVE-2015-0473

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1.0.6 allows remote attackers to affect integrity via unknown vectors related to My Oracle Support Plugin...

CVE-2015-0473

CVE-2015-0473 affects Oracle Enterprise Manager Grid Control (MOS) Base Platform, specifically the Enterprise Manager Base Platform component in MOS 12.1.0.5 and 12.1.0.6. The vulnerability is described as unspecified, with remote attackers able to impact integrity via unknown vectors related to ...

PT-2015-4660

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0.5 through 12.1.0.6 Description The issue affects the integrity of the system, related to the My Oracle Support Plugin in the Enterprise Manager Base Platform component. The exact nature of...

CVE-2015-0473: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1.0.6 allows remote attackers to affect integrity via unknown vectors related to My Oracle Support Plugin...

Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 update

Red Hat JBoss Data Grid 6.4.1, which fixes several security issues, multiple bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

phpok the latest version of the CSRF getshell-a vulnerability warning-the black bar safety net

In the rear of the Typhoon the grid management service is by a get-type request to delete a template, the directory and file name to install lock file install. lock: http://localhost/phpok/admin.php?c=tpl&f=delfile&id=1&folder=./../../ data/&title=The install. lock After the request returns ok,...

Wordpress Justified Image Grid 2.0.1 LFD / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress plugin Justified Image Grid 2.0.1 LFD + XSS Exploit Author: NULLpOint7r Contact me: email protected Home: http://www.sec4ever.com/home/ Dork: inurl:/wp-content/plugins/justified-image-grid/ Date: 2015-02-16 Version:...

Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.0 update

Red Hat JBoss Data Grid 6.4.0, which fixes one security issue, multiple bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores,...