CVE-2015-2763: Undefined Security Weakness

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703...

CVE-2015-2767: Undefined Security Weakness

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."...

CVE-2014-7885: Undefined Security Weakness

Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager ESM before 6.8c have unknown impact and remote attack vectors...

CVE-2014-7884: Undefined Security Weakness

Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors...

CVE-2014-8820: Undefined Security Weakness

The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and CVE-2014-8821...

CVE-2014-5462

Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 Patch 7 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 layoutid parameter to interface/super/editlayout.php; 2 formpatientid, 3 formdrugname, or 4 formlotnumber parameter to...

USPS Breach Hits Customers, Employees

The United States Postal Service is continuing its investigation around a cyber attack at the agency that managed to compromise the information of both employees and customers earlier this year. The USPS announced in a statement on Monday that it recently fell victim to a “cyber intrusion inciden...

CVE-2014-6564: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

CVE-2014-4300: Undefined Security Weakness

Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-6452, CVE-2014-6454...

CVE-2014-4292: Undefined Security Weakness

Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4293,...

CVE-2014-6498: Undefined Security Weakness

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Security...

CVE-2014-4283: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4277...

CVE-2014-4293: Undefined Security Weakness

Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292,...

CVE-2014-7297: Undefined Security Weakness

Unspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress has unknown impact and attack vectors...

Laravel - 'Hash::make()' Password Truncation Security

source: https://www.securityfocus.com/bid/69849/info Laravel is prone to a security weakness due to pseudo password hash collision. Attackers can exploit this issue to bypass intended security restrictions. This may aid in further attacks. // user input password $input = strrepeat'A',72; //...

Granding MA300 - Weak Pin Encryption Brute Force

Granding MA300 - Weak Pin Encryption Brute Force source: https://www.securityfocus.com/bid/69390/info Grand MA 300 is prone to multiple security weaknesses. Attackers can exploit these issues to disclose the access pin by sniffing network traffic or perform brute-force attacks on pin to gain...

CVE-2014-3525: Undefined Security Weakness

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks...

CVE-2014-0609: Undefined Security Weakness

Unspecified vulnerability in Novell Open Enterprise Server OES 11 SP1 before Scheduled Maintenance Update 9415 and 11 SP2 before Scheduled Maintenance Update 9413 for Linux has unknown impact and attack vectors...

CVE-2012-6653: Undefined Security Weakness

Unspecified vulnerability in the All Video Gallery all-video-gallery plugin before 1.2.0 for WordPress has unspecified impact and attack vectors...

CVE-2014-4726: Undefined Security Weakness

Unspecified vulnerability in the MailPoet Newsletters wysija-newsletters plugin before 2.6.8 for WordPress has unspecified impact and attack vectors...