Cross site scripting

Cross-site scripting XSS vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-4189

Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option contain a cross-site scripting (XSS) vulnerability (CVE-2014-4189). The flaw affects Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04, and JP1/Performance Management - Manager Web Option 07-00 through 07-54. ...

CVE-2014-4188

Hitachi Tuning Manager (and JP1/Performance Management - Manager Web Option 07-00 to 07-54) is affected by a CSRF vulnerability that can allow remote attackers to hijack the authentication of unspecified victims. Vectors are not detailed in the provided documents. Affected versions are Hitachi Tu...

CVE-2014-4189

Cross-site scripting XSS vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4188

Cross-site request forgery CSRF vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Multiple Vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option

Overview Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option contains cross-site scripting and cross-site request forgery CSRF vulnerabilities. These vulnerabilities can not be exploited, unless logging in these products. Impact A remote attackers could insert to malicious...

CVE-2013-6436

The lxcDomainGetMemoryParameters method in lxc/lxcdriver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service NULL pointer dereference and libvirtd crash via a guest in the shutdown...

IBM Db2 STMM Denial Of Service Vulnerability - Linux

IBM DB2 is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

[WhatWeb v0.4.7] The Content Management Systems (CMS) Technology Scanner

WhatWeb identifies websites. Its goal is to answer the question, “What is that Website?”. WhatWeb recognises web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 900...

Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management

Overview Hitachi Tuning Manager, JP1/Performance Management - Web Console, and JP1/Performance Management - Manager Web Option contain Cross-site scripting and cross-site request forgery CSRF vulnerabilities. These vulnerabilities can not be exploited, unless logging in these products. Impact A...

IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.8 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple vulnerabilities : - An authorized user with 'CONNECT' privileges from 'PUBLIC' can cause a denial of service via unspecified methods related to DB2's...

CVE-2011-1373

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

CVE-2011-1373

CVE-2011-1373 affects IBM DB2 9.7 on UNIX prior to FP5 when STMM is enabled and DATABASE_MEMORY is set to AUTOMATIC. Local users can trigger a denial of service (daemon crash) via unknown vectors. The issue is documented across multiple sources, and remediation is available in the DB2 9.7 FP5 fix...

Hitachi Tuning Manager Software Cross-Site Scripting Vulnerability

Overview Hitachi Tuning Manager Software contains a cross-site scripting vulnerability. Impact A remote attacker could make a user execute malicious scripts. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

CVE-2010-3382

Removed by vendor...

CVE-2010-3382

tauex in Tuning and Analysis Utilities TAU 2.16.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

AIX 610004 : U836696

The remote host is missing AIX PTF U836696 which is related to the security of the package bos.perf.tune You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Starts nikto with Option -Tuning x016bc and write to KB

This plugin uses nikto to find weak CGI scripts and other known issues regarding web server security. It starts with the option - Tuning x016bc and writes only OSVDB and CVE issues to the KB. Note: The plugin needs the OpenVAS Vulnerability Test Starts nikto with Option -Tuning x016bc and write t...