Fedora abrt competitive conditions vulnerability

Fedora is an open, innovative and forward-thinking operating system and platform based on Linux.ABRT is an automated bug detection and reporting tool. A competitive condition vulnerability exists in Fedora abrt. An attacker can exploit this vulnerability to gain privileges...

Apport/Abrt Local Privilege Vulnerability

Apport is the crash report service on ubuntu, that is, when a program crashes the pop-up program that sends an error report. ABRT is an automated bug detection and reporting tool. Apport/Abrt is vulnerable to a local privilege exploit. An attacker can exploit the vulnerability to gain root...

CVE-2015-1318: Undefined Security Weakness

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace container...

Unspecified Vulnerability in Oracle Hyperion BI+

Oracle Hyperion BI+ is a business intelligence program. A security vulnerability exists in Oracle Hyperion BI+. It allows attackers to exploit this vulnerability to compromise the 'Reporting and Analysis' subcomponent over the HTTP protocol...

CVE-2015-0509

Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and Analysis...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and Analysis...

USN-2569-2 apport vulnerability

USN-2569-1 fixed a vulnerability in Apport. Tavis Ormandy discovered that the fixed packages were still vulnerable to a privilege escalation attack. This update completely disables crash report handling for containers until a more complete solution is available. Original advisory details: Stéphan...

CVE-2015-0509

Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and Analysis...

CVE-2015-0509: Undefined Security Weakness

Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and Analysis...

USN-2569-1: Apport vulnerability

Stéphane Graber and Tavis Ormandy independently discovered that Apport incorrectly handled the crash reporting feature. A local attacker could use this issue to gain elevated privileges...

USN-2569-1 apport vulnerability

Stéphane Graber and Tavis Ormandy independently discovered that Apport incorrectly handled the crash reporting feature. A local attacker could use this issue to gain elevated privileges...

CVE-2015-1318

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace container...

UBUNTU-CVE-2015-1318

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace container...

ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability EMC Identifier: ESA-2015-056 CVE Identifier: CVE-2015-0529 Severity Rating: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N Affected products: • EMC PowerPath...

Multiple Cross-Site Scripting vulnerabilities in Websense Reporting

------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Websense Reporting ------------------------------------------------------------------------ Han Sahin, September 2014...

Websense Reporting Cross Site Scripting

------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Websense Reporting ------------------------------------------------------------------------ Han Sahin, September 2014...

Fast Incident Response: FIR

FIR Fast Incident Response is an cybersecurity incident management platform designed with agility and speed in mind. It allows for easy creation, tracking, and reporting of cybersecurity incidents. FIR is for anyone needing to track cybersecurity incidents CSIRTs, CERTs, SOCs, etc.. It’s was...

Oracle Critical Patch Update Advisory - January 2015

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

D-Link Routers Haunted by Remote Command Injection Bug

Some D-Link routers contain a vulnerability that leaves them open to remote attacks that can give an attacker root access, allow DNS hijacking and other attacks. The vulnerability affects affects a number of D-Link’s home routers and the key details of the flaw have been made public by one of the...

IBM Rational Insight Information Disclosure Vulnerability

IBM Rational Insight is an enterprise-class reporting application product from IBM in the U.S. It can extract data from third-party products into a data warehouse, and present the reports graphically using CognosBI services running on WebSphere. A security vulnerability exists in IBM Rational...