CVE-2012-0119

CVE-2012-0119 is described in the initial entry as an unspecified vulnerability in the MySQL Server component affecting Oracle MySQL 5.1.x and 5.5.x, allowing remote authenticated users to impact availability via unknown vectors. Connected documents from MiracleLinux AXSA:2012-195:01 enumerate My...

CVE-2012-0102

CVE-2012-0102 is listed in MiracleLinux advisories AXSA:2012-195:01 and AXSA:2012-209:01 as an unspecified MySQL Server vulnerability affecting Oracle MySQL 5.0.x/5.1.x, enabling remote authenticated users to affect availability via unknown vectors. The connected Nessus entries enumerate CVE-2012...

CVE-2012-0101

MiracleLinux 4 is affected by CVE-2012-0101 in its MySQL 5.1.x server package (mysql-5.1.61-1.1.0.1.AXS4). The Nessus advisory AXSA:2012-195:01 lists CVE-2012-0101 among security issues fixed in that release, indicating a remote authenticated user could affect availability via unknown vectors. Th...

CVE-2011-3514

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC JDENET...

CVE-2012-0119

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492...

CVE-2012-0486

CVE-2012-0486 affects Oracle MySQL 5.5.x (MySQL Server). The vulnerability allows remote authenticated users to affect availability via unknown vectors (unified with CVE-2012-0486 and other CVEs in the same 2012-01-15 timeframe). Connected OpenVAS data corroborates CVE-2012-0486 among a set of My...

CVE-2012-0074

Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect integrity via unknown vectors related to Sales...

CVE-2012-0485

CVE-2012-0485 is listed as an unspecified vulnerability in Oracle MySQL Server (5.1.x/5.5.x) that could affect availability via unknown vectors and requires a fix in MiracleLinux AXSA:2012-195:01 (the affected package is mysql-5.1.61-1.1.0.1.AXS4 in MiracleLinux 4). The connected Nessus/AXSA docu...

CVE-2012-0120

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492...

CVE-2012-0112

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492...

CVE-2012-0102

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0101...

CVE-2012-0485

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0492...

CVE-2011-4925

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors...

NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability

======= Summary ======= Name: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability Release Date: 5 January 2012 Reference: NGS00106 Discoverer: David Spencer [email protected] Vendor: Oracle Vendor Reference: Systems Affecte...

Oracle GlassFish Server Administration Bypass

======= Summary ======= Name: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability Release Date: 5 January 2012 Reference: NGS00106 Discoverer: David Spencer Vendor: Oracle Vendor Reference: Systems Affected: Oracle GlassFish Server 2...

DEBIAN-CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

Siemens Says It Will Patch Remote Authentication Holes

After first denying their existence, a Siemens spokesman acknowledged on Thursday that his company was aware of a series of security vulnerabilities in its software that could allow remote attackers to take control of industrial control systems. Siemens issued a statement in response to complaint...

Directory traversal

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f encoded dot dot in the file parameter in a download action...

CVE-2011-4800

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" dot dot colon forward slash in the 1 list, 2 put, or 3 get commands...