Code injection

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors...

CVE-2010-3993

HP Insight Control Server Migration for Windows (HP) is affected by CVE-2010-3993 and is vulnerable prior to version 6.2. The HP security bulletin and CVSS data describe a remote vulnerability that could lead to unauthorized access and data modification, with base score 6.4 (MEDIUM). Mitigation: ...

CVE-2010-3991

CVE-2010-3991 concerns HP Insight Control Server Migration for Windows prior to v6.2. The vulnerability is a remote cross-site scripting (XSS) flaw in the product’s web interface, allowing an attacker to inject arbitrary web script or HTML via unspecified vectors. The affected component is HP Ins...

CVE-2010-3992

HP Insight Control Server Migration for Windows, before v6.2, contains a vulnerability (CVE-2010-3992) that could allow remote authenticated users to gain privileges. The HP security bulletin for SSRT100316 rev.1 rates CVE-2010-3992 with a base CVSS v2.0 vector of AV:N/AC:L/Au:S/C:P/I:C/A:P and a...

security update

CentOS Errata and Security Advisory CESA-2010:0734 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2010-October/079194.html Affected packages: Upstream details at: https://access.redhat.com/errata/RHSA-2010:0734...

PointDev IDEAL Migration - Buffer Overflow (Metasploit)

$Id: idealmigrationipj.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

kmod, kvm security update

CentOS Errata and Security Advisory CESA-2010:0627 Updated kvm packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

MDVA-2009:229-1 : mandriva-kde4-config

When the user migrates from a kde3 desktopMandriva 2008.1 to a full kde4 desktop, kdm doesn't start. This update fixes this issue. Update: With previous mandriva-kde4-config advisory, the users plasma configurations, such as wallpaper and icon positioning could be lost. This update fixes this...

[security bulletin] HPSBMA02553 SSRT100184 rev.1 - HP Insight Control Server Migration for Windows, Local and Remote Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02282388 Version: 1 HPSBMA02553 SSRT100184 rev.1 - HP Insight Control Server Migration for Windows, Local and Remote Unauthorized Access to Data, Remote Cross Site Request Forgery CSRF, Cross Sit...

(RHSA-2010:0451) Low: Red Hat Certificate System 7.1 - End of Life Notice

On June 7, 2010, per the life-cycle support policy, version 7.1 of Red Hat Certificate System will exit Production Phase 2, marking the end of its support by Red Hat. Please reference the support policy here: https://www.redhat.com/security/updates/certificate/ For migration planning, please note...

CVE-2010-1557

Multiple cross-site scripting XSS vulnerabilities in HP Insight Control Server Migration before 6.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in HP Insight Control Server Migration before 6.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1557

HP Insight Control Server Migration contains a cross-site scripting (XSS) vulnerability in versions prior to 6.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected product appears in multiple sources as HP Insight Control Server Migrati...

[security bulletin] HPSBMA02522 SSRT100086 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02114879 Version: 1 HPSBMA02522 SSRT100086 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin should be act...

HP Insight Control Server Migration crossite scripting

No description provided...

PointDev IDEAL Migration Buffer Overflow

$Id: idealmigrationipj.rb 9277 2010-05-11 00:24:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

PointDev IDEAL Migration Buffer Overflow

This module exploits a stack buffer overflow in versions v9.7 through v10.5 of IDEAL Administration and versions 4.5 and 4.51 of IDEAL Migration. All versions are suspected to be vulnerable. By creating a specially crafted ipj file, an attacker may be able to execute arbitrary code. NOTE: IDEAL...

IDEAL Migration 4.5.1 Buffer Overflow

New Ticket: IDEAL Migration v4.5.1 Buffer Overflow MSF Exploit Title: IDEAL Migration v4.5.1 Buffer Overflow MSF Date: May 8, 2010 Author: Blake Version: 4.5.1 Tested on: Windows XP SP3 in VirtualBox This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

IDEAL Migration v4.5.1 Buffer Overflow Exploit (Meta)

Exploit for windows platform in category local exploits ===================================================== IDEAL Migration v4.5.1 Buffer Overflow Exploit Meta ===================================================== This file is part of the Metasploit Framework and may be subject to redistributio...

IDEAL Migration 4.5.1 - Local Buffer Overflow (Metasploit)

IDEAL Migration 4.5.1 - Local Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...