CVE-2012-4829

IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attackers to spoof servers by leveraging an inappropriate certificate-trust relationship...

CVE-2013-0225: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-alpha5 for Drupal allows remote authenticated users with the "administer user relationships" permission to inject arbitrary web script or HTML via a relationship name...

Veeam Explorer for Microsoft Exchange: Could not establish trust relationship for the SSL/TLS secure channel

Challenge When restoring items with Veeam Explorer for Microsoft Exchange or sending them as attachments, the following error occurs: The request failed. The underlying connection was closed: could not establish trust relationship for the SSL/TLS secure channel Cause There are two possible causes...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management...

PT-2012-5763

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM for Process versions 5.2.2 and 6.1.0.0 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Supply Chain Relationship Management...

CVE-2012-3140

Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management...

PT-2012-4508

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM For Process versions 6.0.0.6.3 and 6.1.0.1.14 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Supply Chain Relationship Management...

CVE-2012-3140: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management...

Diving Into Flame, Researchers Find A Link To Stuxnet

Researchers digging through the code of the recently discovered Flame worm say they have come across a wealth of evidence that suggests Flame and the now-famous Stuxnet worm share a common origin. Researchers from Kaspersky Lab say that a critical module that the Flame worm used to spread is...

Oracle Outside In OOXML Relationship Tag Parsing Stack Buffer Overflow

A stack buffer overflow vulnerability has been reported in Oracle Outside In...

XSS via posted select tag options

Ruby on Rails is vulnerable to remote cross-site scripting because the application does not validate manually generated select tag options upon submission to actionpack/lib/actionview/helpers/formoptionshelper.rb. This may allow a user to create a specially crafted request that would execute...

Direct Manipulation XSS

Ruby on Rails contains a flaw that allows a remote cross-site scripting XSS attack. This flaw exists because the application does not validate direct manipulations of SafeBuffer objects via '' and other methods. This may allow a user to create a specially crafted request that would execute...

THE "TRUTH" SIMMERS THE POT OF SABU

THE "TRUTH" SIMMERS THE POT OF SABU By: Patti Galle, Editor THN. As I look at my guy fawkes mask and reflect on the recent arrest of several lulzsec members, I have a wrenching feeling in my gut to tell the "truth." Gather around anonymous, lulzsec, FBI, passionate supporters, liberal haters, and...

ZDI-12-017 : Oracle Outside In OOXML Relationship Tag Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-017 : Oracle Outside In OOXML Relationship Tag Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-017 January 20, 2012 - -- CVE ID: - -- CVSS: 9.7, AV:N/AC:L/Au:N/C:C/I:C/A:P - -- Affected Vendors:...

Failed Accessing Windows Event Log

Challenge SCOM reports a Warning: "Failed Accessing Windows Event Log...". and in the State Change Events description you can find: "The Windows Event Log Provider was unable to open the nworksEventLog event log on computer 'nodexxx' for reading. The provider will retry opening the log every 30...

Oracle Outside In OOXML Relationship Tag Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Outside In. Authentication is not required to exploit this vulnerability. The flaw exists within the sccfut.dll component which is used by multiple vendors, most notably the Novell Groupwise...

Member servers are not able to authenticate to the Domain Controller

Challenge Either of the following errors occur: No authority could be contacted for authentication. Copy The trust relationship between this workstation and the primary domain failed. Copy Cause The server has lost trust with the Active Directory domain. Solution Login to the machine using a loca...

CMSPro! 2.08 - Cross-Site Request Forgery

CMSPro! 2.08 - Cross-Site Request Forgery CMSPro! 2.08 CSRF Vulnerability Title : CMSPro! 2.08 Cross Site Request Forgery CSRF Vulnerability Software : CMSPro! Version : 2.08 Site : http://www.wojoscripts.com/cmspro/ or http://codecanyon.net/item/cms-pro-lightweight-content-management-system/1400...

PT-2011-2770

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1 Description The issue concerns the PKI functionality, which fails to prevent permanent caching of certain public keys. This allows remote attackers to bypass authentication and potentially have other impact...