JVN#18405927 Multiple Cybozu products vulnerable to cross-site request forgery

Multiple Cybozu products contain a cross-site request forgery vulnerability. Impact If a user views a malicious web page while logged onto the Cybozu web interface, the user's schedules and other configuration settings may be altered. Solution Update the Software Apply the latest updates provided...

Groupmax Collaboration Schedule Information Disclosure Vulnerability

Overview The Schedule component in Groupmax Collaboration contains an information disclosure vulnerability where non-disclosable information can be displayed on a schedule portlet. Impact Unintended information diasclosure could occur, which an attacker could exploit for further attack. Solution...

Unfixed XSS vulnerability at www.historychannel.com.tr

Security researcher CiCoSz, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.historychannel.com.tr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Code injection

Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C, uCosminexus Collaboration Portal 06-30 through 06-30-/F and 06-32 through 06-32-/C, and Groupmax Collaboration Web Client -...

CVE-2007-5808

Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C, uCosminexus Collaboration Portal 06-30 through 06-30-/F and 06-32 through 06-32-/C, and Groupmax Collaboration Web Client -...

CVE-2007-5808

The CVE-2007-5808 entry concerns an information-disclosure vulnerability in the Schedule component of Hitachi Groupmax Collaboration Portal (and related uCosminexus/Groupmax Web Client components). The non-disclosable information could be exposed via schedule portlets, allowing remote attackers t...

CVE-2007-5808

Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C, uCosminexus Collaboration Portal 06-30 through 06-30-/F and 06-32 through 06-32-/C, and Groupmax Collaboration Web Client -...

CVE-2007-4204

Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the wrong user under...

Design/Logic Flaw

Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the wrong user under...

CVE-2007-4204

Hitachi Groupmax Collaboration components (Schedule) across Groupmax Collaboration Portal 07-32, uCosminexus Collaboration Portal 06-32, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 are affected. The issue described is that schedule data can be assigned to the wrong user under unsp...

CVE-2007-4204

Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 through 07-32-/A, can assign schedule data to the wrong user under...

CVE-2005-4323

Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial of service of unspecified impact via repeated...

CVE-2005-4323

CVE-2005-4323 describes an unspecified vulnerability in Hitachi Cosminexus Collaboration Portal (versions 06-00 through 06-10-/B), Groupmax Collaboration Portal (07-00 through 07-10-/B), and Groupmax Collaboration Web Client (07-00 through 07-10-/A) that allows remote attackers to cause a denial ...

PeteFinnigan.com - Oracle security advisory

Hi I have just created a security advisory for the issue I found that is fixed in Oracle latest security patch. The issue is with abuse of DIRECTORY objects and can be found here http://www.petefinnigan.com/directorytraversal.pdf - I have also updated my Oracle security alerts page to link to thi...

CVE-2004-1722

SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter...

Небольшая дырка в Crontab FreeBSD

Можно открыть любой файл в формает Crontab, в т.ч. расписания других пользователей...

Microsoft Windows SMB Registry : Schedule Key Permission Weakness Local Privilege Escalation

The registry key SYSTEM\CurrentControlSet\Services\Schedule is writeable by users who are not in the admin group. Since the scheduler runs with SYSTEM privileges, this allow a malicious user to gain these privileges on this system. C Tenable Network Security, Inc. include"compat.inc"; if...

SAFER+attack.txt

Date: Wed, 30 Dec 1998 01:41:59 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Academic Attacks on SAFER+ Forwarded From: "Jay D. Dyson" Originally From: John Kelsey I believe I have found two attacks on the SAFER+ version with 256-bit keys. While these attacks aren't practical, they...

2018-03 Security Update for Windows Server 2008 for x64-based Systems (KB4089229)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...