Unspecified Vulnerability in Oracle Fusion Middleware Oracle WebLogic Server Component (CNVD-2016-10057)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2016-09928)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

PT-2016-7503

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager ALM versions prior to 5.3 SP3 Update 1 Description The issue allows remote attackers to execute arbitrary SQL commands via crafted traffic to the TCP port 4410. This can be achieved by sending malicious input...

PT-2016-6711

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 2.x through 2.3.5 Open Ticket Request System OTRS versions 4.x through 4.0.4 Open Ticket Request System OTRS versions 5.x through 5.0.4 Description The issue allows remote attackers to execute arbitrary...

EMC Avamar ADS and AVE Unauthorized Data Access Vulnerability

EMC Avamar is a remote backup and recovery solution. An unauthorized data access vulnerability exists in EMC Avamar versions prior to 7.1.2 and 7.2.x prior to 7.2.1, ADS, and AVE in the web-restore interface implementation. An authenticated remote user can read or delete directories via a Linux...

Apache Struts Class Method Access

The vulnerability of the CookieInterceptor class implementation in the Apache Struts software platform is related to deficiencies in access control when processing the cookiesName parameter with the symbol “”. Exploiting this vulnerability can allow an attacker to gain access to, read, modify, or...

OpenAFS Multiple Vulnerabilities - 01 - Windows

OpenAFS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openafs:openafs"; ifdescription...

Unspecified Vulnerability in Oracle PeopleSoft HCM Global Payroll Switzerland Security Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft HCM Global Payroll Switzerland Security component allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in the...

Unspecified Vulnerability in Oracle WebLogic WLS Core Component

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component of Oracle WebLogic allows remote attackers to exploit the vulnerability to gain unauthorized access to data, modify it, an...

Unspecified Vulnerability in Oracle WebLogic WLS Core Component (CNVD-2016-00564)

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component inside Oracle WebLogic allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability to gai...

Oracle Fusion Middleware Unauthorized Access

The vulnerability of the Oracle HTTP Server component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to read data...

Oracle Fusion Middleware Unauthorized Access

The vulnerability of the Oracle GlassFish Server software component of the Oracle Fusion Middleware framework is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read data...

Oracle E-Business Suite Unauthorized Access

The vulnerability of the Oracle Applications component in Oracle E-Business Suite systems, which is part of the enterprise automation system, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...

CVE-2015-6303

CVE-2015-6303 concerns the Cisco Spark mobile app (2015-07-04 build) where SSL/TLS certificate validation is flawed. The root cause is improper verification of X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and access sensitive information via a crafte...

Symantec Ghost Out-of-Bounds Indexing Remote Code Execution Vulnerability

Symantec Ghost Explorer Utility is GHO file browsing tool. Symantec Ghost has an out-of-bounds indexing remote code execution vulnerability that can be exploited by an attacker to cause a denial of service or access unauthorized data...

Symantec Endpoint Protection Manager and Client Issues

SUMMARY Symantec Endpoint Protection SEP 12.1.6 addresses vulnerabilities that were found in prior releases. These include an authorized but less-privileged administrator able to attempt a blind SQL injection in the SEP Manager SEPM console through PHP prepared statements; a local Denial of Servi...

PT-2015-5261

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions prior to 6.4.5 Description The issue allows remote administrators to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations For versions...

Multiple Vulnerabilities in Cisco Unified Communications Manager

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting and cross-site request forgery vulnerability exists in Cisco Unified Communications Manager. An unauthenticated, remote attacker could use this vulnerability to execute...

PT-2015-5391

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3.400 Description The issue allows remote authenticated ePO users to execute arbitrary SQL commands. This could potentially lead to unauthorized data access or modification...

ReviewPost 2.84 - Multiple Vulnerabilities

ReviewPost 2.84 - Multiple Vulnerabilities ReviewPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc. Product: ReviewPost Version: = 2.84 Website: http://www.reviewpost.com/ BID: 12159 CVE: CVE-2005-0270 CVE-2005-0271 CVE-2005-0272 OSVDB: 12703 12704 12705 12706 12707 12708 SECUNIA: 13697...