CVE-2010-3533

CVE-2010-3533 affects PeopleSoft Enterprise SCM OM and CRM Order Capture (Oracle PeopleSoft/JD Edwards), specifically in PeopleSoft versions 8.9, 9.0 and 9.1. The initial description identifies an unspecified vulnerability that allows remote authenticated users to compromise confidentiality and i...

CVE-2010-3526

Unspecified vulnerability in the PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3536

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3526

CVE-2010-3526 affects PeopleSoft Enterprise SCM - PO in Oracle PeopleSoft/JD Edwards Suite (8.9 Bundle #38, 9.0 Bundle #31, 9.1 Bundle #6). The connected documents indicate the vulnerability requires authentication (Remote Exploit without Auth: No) and could affect confidentiality and integrity v...

CVE-2010-3533

Unspecified vulnerability in the PeopleSoft Enterprise SCM OM and CRM Order Capture component in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3536

CVE-2010-3536 affects PeopleSoft Enterprise SCM within Oracle PeopleSoft/JD Edwards Suite (8.9 Bundle #38, 9.0 Bundle #31, 9.1 Bundle #6). The vulnerability is described as an unspecified issue allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. Oracle...

CVE-2010-3524

CVE-2010-3524 affects Oracle PeopleSoft/JD Edwards: PeopleSoft Enterprise SCM - Strategic Sourcing in 8.9 Bundle #38, 9.0 Bundle #31, 9.1 Bundle #6. The vulnerability allows remote authenticated users to affect confidentiality and integrity, via vectors not specified in the provided documents. Af...

CVE-2010-3525

CVE-2010-3525 affects Oracle’s PeopleSoft and JD Edwards Suite (8.9–9.1) in the following components: FMS, SCM, EPM, CRM, and Campus Solutions. The vulnerability is described as an unspecified issue that allows a remote attacker who is authenticated to affect confidentiality and integrity via unk...

[SECURITY] Fedora 13 Update: cgit-0.8.2.1-4.fc13

This is an attempt to create a fast web interface for the git scm, using a builtin cache to decrease server io-pressure...

[SECURITY] Fedora 12 Update: cgit-0.8.2.1-4.fc12

This is an attempt to create a fast web interface for the git scm, using a builtin cache to decrease server io-pressure...

[SECURITY] Fedora 14 Update: cgit-0.8.2.1-4.fc14

This is an attempt to create a fast web interface for the git scm, using a builtin cache to decrease server io-pressure...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle 37, SCM 9.0 Bundle 30, and SCM 9.1 Bundle 4 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-2380

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle 37, SCM 9.0 Bundle 30, and SCM 9.1 Bundle 4 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-2380

CVE-2010-2380 affects PeopleSoft Enterprise FSCM within Oracle PeopleSoft/JD Edwards Suite SCM: SCM 8.9 Bundle #37, SCM 9.0 Bundle #30, and SCM 9.1 Bundle #4. The vulnerability is described as local, with impact to confidentiality, integrity, and availability, but vectors and root cause are unspe...

Motorola Surfboard Cable Modem - Directory Traversal

Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the /etc/passwd file from the modem:...

Silverstripe <= v2.3.4: two XSS vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, http://silverstripe.org/, version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the...

Silverstripe CMS 2.3.4 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, , version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the 'CommenterURL' parameter...

Mandriva Update for kernel MDVSA-2008:234 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:234 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

kernel: Unix sockets kernel panic

The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...

kernel: Unix sockets kernel panic

The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...