CVE-2011-0837

Unspecified vulnerability in the Agile Technology Platform component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Security...

CVE-2011-0837

CVE-2011-0837 denotes an unspecified vulnerability in the Agile Technology Platform component of Oracle Supply Chain Products Suite (SCP) 9.3.0.2 and 9.3.1. The vulnerability is described as allowing remote attackers to affect confidentiality through unknown vectors related to Security. The affec...

McAfee Firewall Reporter 'GernalUtilities.pm'验证绕过漏洞

Bugtraq ID: 47306 McAfee Firewall Reporter用于集中处理企业范围内McAfee网关安全设备的日志和审计数据。 负责验证用户的代码存在缺陷。GernalUtilities.pm包含的代码通过解析Cookie值来验证会话是否合法。在检查特定文件只判断是否存在而没有检查其内容。使用目录遍历技术攻击者可以把cgisess cookie值指向任意服务器上存在的文件，绕过验证。 0 McAfee Firewall Reporter 5.1.0.6 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

Expert: Stuxnet Just Latest in U.S. Hacks of Covert Nuke Programs

CORRECTION: This article originally included the incorrect name for an associate of A.Q. Khan. The correct name of the associate is “Friedrich Tinner,” a Swiss nuclear engineer. The name has been corrected in the article. The author of a new book on the evolution of the world’s first nuclear blac...

CVE-2010-4432

Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure...

CVE-2010-4429

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...

Code injection

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...

CVE-2010-3505

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments, a different vulnerability than CVE-2010-4429...

CVE-2010-4429

CVE-2010-4429 affects Oracle’s Agile Core in the Oracle Supply Chain Products Suite (versions 9.3.0.2 and 9.3.1). The vulnerability allows remote authenticated users to affect integrity via unknown vectors related to the Web Client, and is noted as a different issue from CVE-2010-3505. The connec...

CVE-2010-4429

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505...

CVE-2010-4432

Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure...

CVE-2010-4432

Technical details, affected products, and remediation for CVE-2010-4432 are not publicly disclosed in the provided documents. Monitor for updates from Oracle or CVE records.

CVE-2010-3505

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments, a different vulnerability than CVE-2010-4429...

CVE-2010-3505

CVE-2010-3505 describes an unspecified vulnerability in the Agile Core component of Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1. The issue would allow remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments (a different vulnerabili...

CVE-2010-2417

Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.0.0 allows remote authenticated users to affect integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.0.0 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2010-2417

Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.0.0 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2010-2417

CVE-2010-2417 affects Oracle’s Agile PLM component of the Oracle Supply Chain Products Suite, version 9.3.0.0. The vulnerability is described as unspecified, with remote authentication required and vectors unknown, but Oracle’s October 2010 CPU lists it under Agile PLM with a CVSSv2 base score of...

Oracle Critical Patch Update Advisory - October 2010

Oracle Critical Patch Update Advisory - October 2010 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are...

Oracle Releases Critical Patch for October 2010

Oracle has released its Critical Patch Update for October 2010 to address 85 vulnerabilities across multiple products. This update contains the following security fixes: 7 for Oracle Database Server 8 for Oracle Fusion Middleware 1 for Oracle Enterprise Manager Grid Control 6 for Oracle E-Busines...