CVE-2018-2630

CVE-2018-2630 affects Oracle FLEXCUBE Universal Banking (Security Management System subcomponent). Affected versions: 11.5.0, 11.6.0, 11.7.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise data: unauthorized update/insert/delete of some data and una...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-02390)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Security Management System component of Oracle FLEXCUBE Universal Banking. An attacker could exploit...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of January 8, 2018

Last week, three interesting vulnerabilities popped up on the news and security feeds. Researchers disclosed CVE-2017-5753 and CVE-2017-5715, collectively known as Spectre, and CVE-2017-5754, known as Meltdown. These vulnerabilities take advantage of “speculative execution” of instructions...

Building a Security Risk Management Program

The frequency of data breaches today highlights the need to peel back the onion on security programs and identify a laser-focused mission and ultimate goal. As a compliance manager, I know the horror stories first hand. Let’s take a deeper dive into security and risk management basics to enable...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of July 10, 2017

Before the world of laptops, tablets and smart phones, some of us had to use paper-based solutions to keep track of our calendars and to-do lists. I used a Franklin Planner, where I kept track of my calendar as well as my never-ending to-do list. The Franklin Planner used the “ABC” system to help...

HP TippingPoint Security Management System / TippingPoint Virtual Security Management System code execution

Code execution via web interface...

[security bulletin] HPSBHF02965 rev.1 - HP Security Management System, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04156626 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04156626 Version: 1 HPSBHF02965 rev....

HP Security Management System未明远程代码执行漏洞

Bugtraq ID:65970 CVE ID:CVE-2013-6201 HP Security Management System是一个惠普公司开发的安全管理系统。 HP Security Management System存在未明错误，允许攻击者利用漏洞执行任意代码。 0 HP Security Management System 3.3.0 HP Security Management System 3.5.0 HP Security Management System 3.6.0 HP Security Management System 3.6.0 patch 1 厂商补丁：...

CVE-2013-6201

Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-6201

HP Security Management System (SMS) is affected by CVE-2013-6201 for versions 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2. The Security Bulletin indicates remote execution of arbitrary code could be caused by this vulnerability; the exact exploit vectors are not detailed in the provided...

ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Vulnerability

Document Title: =============== ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1122 Release Date: ============= 2013-10-28 Vulnerability Laboratory ID VL-ID: ====================================...

McAfee ePolicy Orchestrator Framework Services Log Handling Format String (CVE-2008-1357)

McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. McAfee ePolicy Orchestrator is a central security management system to manage security policy, assess and enforce policy, notify...

CVE-2008-7084

Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2008-7084

CVE-2008-7084 describes a directory traversal vulnerability in the web server 1.0 of Velocity Security Management System. An attacker can read arbitrary files by using a “..” in the URI. The NVD entry lists a CVSSv2 base score of 5.0 (Medium) with network access, low attack complexity, no authent...

Pooya Site Builder (PSB) SQL Injection Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/42 1. Description: Pooya site builder psb i...

Pooya Site Builder (PSB) 6.0 - Multiple SQL Injections

www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/42 1. Description: Pooya site builder psb i...

CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

CVE-2005-2188

CVE-2005-2188 affects McAfee IntruShield Security Management System. The flaw allows remote attackers to obtain the Manager account by guessing the user ID included in the URL, enabling a brute-force path to privilege escalation. The common description notes possible privilege gain via brute forc...

CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...