Code injection

Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Search...

CVE-2011-2273

Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Search...

CVE-2011-2273

Technical details for CVE-2011-2273 are not publicly available in the provided documents; the description cites an unspecified vulnerability in Oracle Supply Chain Products Suite 9.3.0.3/9.3.1.1 related to Search. Monitor for updates.

Oracle Releases Critical Patch Update for July 2011

Oracle has released its Critical Patch Update for July 2011 to address 78 vulnerabilities across multiple products. This update contains the following security fixes: 13 for Oracle Database Server 3 for Oracle Secure Backup 7 for Oracle Fusion Middleware 18 for Oracle Enterprise Manager 1 for...

DHS Official Warns of Security Risks in Supply Chain

In a House committee hearing on cybersecurity threats Thursday, a DHS official said he was aware of some cases in which software and hardware manufactured overseas had arrived in the U.S. pre-loaded with security bugs. However, the official did not say that those cases involved vulnerabilities or...

Supply Network Collaboration of Uniliver Hacked by CrosS | R00TW0RM

Supply Network Collaboration of Uniliver Hacked by CrosS | R00TW0RM CrosS , A hacker from R00TW0RM hack the Supply Network Collaboration of Uniliver at aasnc.unilever.com , The Screenshot submitted by him to us as shown above for Hack Proof...

CVE-2011-0837

Unspecified vulnerability in the Agile Technology Platform component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Security...

CVE-2011-0837

CVE-2011-0837 denotes an unspecified vulnerability in the Agile Technology Platform component of Oracle Supply Chain Products Suite (SCP) 9.3.0.2 and 9.3.1. The vulnerability is described as allowing remote attackers to affect confidentiality through unknown vectors related to Security. The affec...

McAfee Firewall Reporter 'GernalUtilities.pm'验证绕过漏洞

Bugtraq ID: 47306 McAfee Firewall Reporter用于集中处理企业范围内McAfee网关安全设备的日志和审计数据。 负责验证用户的代码存在缺陷。GernalUtilities.pm包含的代码通过解析Cookie值来验证会话是否合法。在检查特定文件只判断是否存在而没有检查其内容。使用目录遍历技术攻击者可以把cgisess cookie值指向任意服务器上存在的文件，绕过验证。 0 McAfee Firewall Reporter 5.1.0.6 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

Expert: Stuxnet Just Latest in U.S. Hacks of Covert Nuke Programs

CORRECTION: This article originally included the incorrect name for an associate of A.Q. Khan. The correct name of the associate is “Friedrich Tinner,” a Swiss nuclear engineer. The name has been corrected in the article. The author of a new book on the evolution of the world’s first nuclear blac...

CVE-2010-4432

Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure...

CVE-2010-4429

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...

Code injection

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...

CVE-2010-3505

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments, a different vulnerability than CVE-2010-4429...

CVE-2010-4429

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...

CVE-2010-4432

Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure...

CVE-2010-4429

CVE-2010-4429 affects Oracle’s Agile Core in the Oracle Supply Chain Products Suite (versions 9.3.0.2 and 9.3.1). The vulnerability allows remote authenticated users to affect integrity via unknown vectors related to the Web Client, and is noted as a different issue from CVE-2010-3505. The connec...

CVE-2010-4432

Technical details, affected products, and remediation for CVE-2010-4432 are not publicly disclosed in the provided documents. Monitor for updates from Oracle or CVE records.

CVE-2010-3505

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments, a different vulnerability than CVE-2010-4429...

CVE-2010-3505

CVE-2010-3505 describes an unspecified vulnerability in the Agile Core component of Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1. The issue would allow remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments (a different vulnerabili...