PT-2011-1415

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control version 6.0 Oracle Real User Experience Insight affected versions not specified Description The issue affects confidentiality and integrity, potentially via SQL injection in rsynclogdird, related to...

PT-2011-1421

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.1 Enterprise Manager Grid Control version 10.2.0.5 Description The issue affects confidentiality, integrity, and availability. It is related to an exposed JSP script that accepts XML...

Experts Discuss Stuxnet's Long-Term Impact on Cybersecurity

Stuxnet has both fascinated and horrified the cybersecurity community throughout 2010. Its multiple zero-day exploits, stealth capabilities, and precise control over industrial machinery mark it as a prime example of advanced cyber threats. Stuxnet represents both a nightmare and a dream for...

CVE-2010-4495: Undefined Security Weakness

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service...

PT-2010-5504

Name of the Vulnerable Software and Affected Versions TIBCO ActiveMatrix Service Grid versions 3.0.0 through 3.1.0 TIBCO ActiveMatrix Service Bus versions 3.0.0 through 3.0.1 TIBCO ActiveMatrix BusinessWorks Service Engine version 5.9.0 TIBCO ActiveMatrix BPM versions 1.0.1 through 1.0.2 TIBCO...

CVE-2010-4179

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid MRG 1.3 recommends that Condor should be configured so that the MRG Management Console cumin can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with...

CVE-2010-4179

Summary: CVE-2010-4179 affects Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3. The issue arises from the Management Console installation guide configuring Condor so that cumin can submit jobs on behalf of a user, creating a trusted channel with insufficient access control. This allows ...

CVE-2010-4179: Undefined Security Weakness

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid MRG 1.3 recommends that Condor should be configured so that the MRG Management Console cumin can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with...

Important: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging and Grid security update

Updated Red Hat Enterprise MRG Messaging and Grid packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

Oracle Enterprise Manager Grid Control HTTP请求远程溢出漏洞

BUGTRAQ ID: 43945 CVE ID: CVE-2010-2390 Grid Control是为整个Oracle IT架构提供中心化监视、管理、生命周期管理功能的系统管理软件。 远程攻击者可以通过向Grid Control的EM Console组件提交超长的HTTP请求触发缓冲区溢出，导致执行任意指令。 Oracle Enterprise Manager Grid Control 10.x 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（cpuoct2010）以及相应补丁: cpuoct2010：Oracle Critical Patch...

CVE-2010-2390

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown...

Security feature bypass

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown...

CVE-2010-2390: Undefined Security Weakness

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown...

PT-2010-3974

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.1.0.5 through 10.1.0.5 Oracle Database Server versions 10.2.0.3 through 10.2.0.3 Oracle Fusion Middleware versions 10.1.2.3 through 10.1.2.3 Oracle Fusion Middleware versions 10.1.4.3 through 10.1.4.3...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging security and bug fix update 1.2.2

Updated Red Hat Enterprise MRG Messaging packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Joomla Component Jgrid 1.0 Local File Inclusion Vulnerability

No description provided by source. Jgrid 1.0 Joomla Component Local File Inclusion Vulnerability Name Jgrid Vendor http://datagrids.clubsareus.org Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date...

Oracle Critical Patch Update Advisory - July 2010

Oracle Critical Patch Update Advisory - July 2010 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are...

CVE-2010-2373

Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-2373

Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-2373

CVE-2010-2373 affects Oracle Enterprise Manager Grid Control (Console component). The vulnerability is remote-exploitable over HTTP and allows integrity impact with no authentication, as per the Oracle July 2010 CPU entry. Affected product versions are Grid Control 10.1.0.6 and 10.2.0.5. The CPU ...