PT-2018-18169

Name of the Vulnerable Software and Affected Versions Drupal versions 7.x through 8.x Description A remote code execution issue exists within multiple subsystems of Drupal. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being...

HPESBGN03722 rev.2 - HPE Operations Agent Virtual Appliance, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.11, v11.12, v11.13, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

Design/Logic Flaw

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

KLA10545 Multiple vulnerabilities in MediaWiki and extensions

Multiple serious vulnerabilities have been found in MediaWiki. Malicious users can exploit these vulnerabilities to bypass security restrictions, inject arbitrary code, cause denial of service or obtain sensitive information. Below is a complete list of vulnerabilities 1. Unknown vulnerability ca...

Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-169-01A Wind River VxWorks TCP Predictability Vulnerability in ICS Devices that was published November 5, 2015, on the NCCIC/ICS-CERT web site. Raheem Beyah, David Formby, and San Shin Jung of Georgia Tech, via a...

HP-UX Update for xfs and stmkfont HPSBUX01061

Check for the Version of xfs and stmkfont OpenVAS Vulnerability Test HP-UX Update for xfs and stmkfont HPSBUX01061 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

JVN#30732239: Apache Tomcat allows access from a non-permitted IP address

Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat contains a vulnerability which may allow a user from a non-permitted IP address to gain access to a protected context. Impact Impact varies depending on t...

Crysis 1.21 - HTTP/XML-RPC Service Remote Denial of Service

source: https://www.securityfocus.com/bid/29759/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denying further service to legitimate users. Crysi...

[security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBST01071 REVISION: 0 SSRT4794 rev.0 HP StorageWorks Command View XP access restriction bypass NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...

SoX - .wav Local Buffer Overflow

SoX - .wav Local Buffer Overflow //--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...

[security bulletin] SSRT4773 HP-UX xfs and stmkfont remote unauthorized access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01061 REVISION: 0 TITLE: SSRT4773 rev.0 HP-UX xfs and stmkfont remote unauthorized access NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...