Oracle Forms and Reports Multiple Unspecified Vulnerabilities (January 2015 CPU)

Binary data oracleformsreportsjan2015cpu.nbin...

NETIKUS.NET EventSentry Cross-Site Scripting Vulnerability

NETIKUS.NET EventSentry is a set of event log management and Windows server monitoring software from NETIKUS.NET, USA. The software provides log management, network monitoring and real-time reporting. A cross-site scripting vulnerability exists in Web Reports in NETIKUS.NET EventSentry version...

CVE-2015-1180

Cross-site scripting XSS vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter to networktile/bullet...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter to networktile/bullet...

CVE-2015-1180

Cross-site scripting XSS vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter to networktile/bullet...

CVE-2015-1180

EventSentry Web Reports (Web Reports) vulnerability CVE-2015-1180 affects version 3.1.0 (and possibly earlier) where the pageId parameter in the networktile/bullet endpoint is not properly filtered, enabling a reflected XSS via a crafted URL. The core issue is insufficient input sanitization for ...

Unspecified Vulnerability in Oracle Reports Developer

Oracle Reports Developer is a report development, design and production suite. A security vulnerability exists in Oracle Reports Developer that could be exploited by remote attackers to compromise system integrity...

CVE-2014-6580

Technical details about CVE-2014-6580 are not publicly available in the provided documents. The records only indicate an unspecified vulnerability in Oracle Reports Developer within Oracle Fusion Middleware; monitor for updates and additional disclosures.

[SECURITY] Fedora 19 Update: denyhosts-2.6-28.fc19.1

DenyHosts is a Python script that analyzes the sshd server log messages to determine which hosts are attempting to hack into your system. It also determines what user accounts are being targeted. It keeps track of the frequency of attempts from each host and, upon discovering a repeated attack...

IBM Security AppScan Enterprise Arbitrary Code Execution Vulnerability

IBM Security AppScan Enterprise is a set of U.S. IBM Web application security testing solutions. Formerly known as IBM Rational AppScan Enterprise, the program supports simultaneous scanning of multiple Web applications , generate vulnerability reports and intelligent patching . IBM Security...

CVE-2014-8124

OpenStack Dashboard Horizon before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

zANTI 2.0 - Android Network Toolkit

zANTI is a mobile penetration testing toolkit that lets security managers assess the risk level of a network with the push of a button. This easy to use mobile toolkit enables IT Security Administrators to simulate an advanced attacker to identify the malicious techniques they use in the wild to...

CSP leaks redirect data via violation reports — Mozilla

Security researcher Muneaki Nishimura discovered that Content Security Policy CSP violation reports triggered by a redirect did not remove path information as required by the CSP specification. This potentially reveals information about the redirect that would not otherwise be known to the origin...

RHEL 6 : rhevm-dwh 3.3.3 (RHSA-2014:0559)

An updated rhevm-dwh package that fixes one security issue and two bugs is now available. The Red Hat Security Response Team has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CV...

RHEL 6 : rhevm-reports 3.3.3 (RHSA-2014:0558)

An updated rhevm-reports package that fixes three security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for eac...

Dell SonicWall GMS v7.2.x - Persistent Web Vulnerability

Document Title: =============== Dell SonicWall GMS v7.2.x - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1222 Release Date: ============= 2014-10-21 Vulnerability Laboratory ID VL-ID: ====================================...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589...

CVE-2014-3372

CVE-2014-3372 affects Cisco Unified Communications Manager (CUCM) Server, specifically the CCM reports interface. The vulnerability is due to insufficient input validation of parameters passed via HTTP GET/POST, enabling multiple reflected XSS attacks. Impact is remote, unauthenticated exploitati...

WiFi software Acrylic WiFi Free v2.1 - WiFi analyzer software and WLAN scanner for network analysts

Acrylic WiFi Professional is the best WiFi analyzer software to identify access points and wifi channels, and to analyze and resolve incidences on 802.11a/b/g/n/ac wireless networks in real time. It is a perfect tool for advanced users and professional WiFi network analysts and administrators to...