PT-2015-2558

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11.2 Description The issue is related to errors in the code of the Solaris Kernel Zones subcomponent of the Solaris operating system. It may allow a local attacker to gain unauthorized read access to data. The...

PT-2015-2568

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.4 Description The issue is related to an unspecified vulnerability in the Oracle Applications DBA component, allowing remote authenticated users to affect confidentiality. This vulnerability...

PT-2015-2569

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality via vectors related to JGSS. It is related to errors in the code of the JGSS subcomponent of the...

PT-2015-2464

Name of the Vulnerable Software and Affected Versions Java Platform affected versions not specified Description The issue is related to errors in the code of the Java Platform. It can be exploited by a remote attacker to gain read access to protected information using a Java Web Start application...

PT-2015-2473

Name of the Vulnerable Software and Affected Versions Java Platform affected versions not specified Description The issue is related to errors in the code of the Java Platform. It allows a remote attacker to gain read access to protected information using a Java Web Start application or a Java...

PT-2019-5368 · Mysql Server +8 · Mysql Client +8

Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.47 and prior MySQL Client versions 5.7.29 and prior MySQL Client versions 8.0.18 and prior Description: The issue is related to a lack of protection for service data in the MySQL Client C API component. It allows a...

Design/Logic Flaw

The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and bypass intended read-access restrictions via unspecified vectors...

CVE-2015-0548

The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and bypass intended read-access restrictions via unspecified vectors...

CVE-2015-0547

The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and bypass intended read-access restrictions via unspecified vectors...

PT-2015-4708

Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 4.1 through 4.2 before P16 EMC Documentum D2 versions 4.5 before P03 Description The issue allows remote authenticated users to conduct Documentum Query Language DQL injection attacks, which can be used to bypass...

PT-2015-4709

Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 4.1 through 4.2 before P16 EMC Documentum D2 version 4.5 before P03 Description The issue allows remote authenticated users to conduct Documentum Query Language DQL injection attacks, which can be used to bypass...

CVE-2015-0547: Improper Input Validation

The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and bypass intended read-access restrictions via unspecified vectors...

CVE-2015-0548: Improper Input Validation

The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and bypass intended read-access restrictions via unspecified vectors...

Cisco WebEx Meeting Center Information Disclosure Vulnerability (CNVD-2015-04101)

Cisco WebEx Meeting Center is a set of WebEx meeting solutions in the United States Cisco Cisco company's WebEx online meeting products. An information disclosure vulnerability exists in Cisco WebEx Meeting Center. Because the program fails to properly determine the authentication used to read th...

Fedora 21 : less-471-4.fc21 (2015-9325)

better fix of out of bounds read access in isutf8wellformed CVE-2014-9488 out of bounds read access in isutf8wellformed CVE-2014-9488 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 22 : less-471-4.fc22 (2015-9357)

better fix of out of bounds read access in isutf8wellformed CVE-2014-9488 out of bounds read access in isutf8wellformed CVE-2014-9488 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Updated perl-XML-LibXML packages fix CVE-2015-3451

Updated perl-XML-LibXML package fixes security vulnerability: Tilmann Haak from xing.com discovered that XML::LibXML did not respect the expandentities parameter to disable processing of external entities in some circumstances. This may allow attackers to gain read access to otherwise protected...

DSA-3243-1 libxml-libxml-perl - security update

Bulletin has no description...

Debian Security Advisory DSA 3243-1 (libxml-libxml-perl - security update)

Tilmann Haak from xing.com discovered that XML::LibXML, a Perl interface to the libxml2 library, did not respect the expandentities parameter to disable processing of external entities in some circumstances. This may allow attackers to gain read access to otherwise protected resources, depending ...

MGASA-2015-0139 Updated less packages fix CVE-2014-9488

Updated less package fixes security vulnerability: Malformed UTF-8 data could have caused an out of bounds read in the UTF-8 decoding routines, causing an invalid read access CVE-2014-9488...