KLA10484 Interface spoofing vulnerability in McAfee Agent

An unspecified vulnerability was found in McAfee Agent. By exploiting this vulnerability malicious users conduct clicjacking attack. This vulnerability can be exploited remotely via a specially designed web page. Original advisories McAfee bulletin Exploitation Related products McAfee-Agent CVE...

Google Chrome UI Out-of-Bounds Read Vulnerability

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. An out-of-bounds read vulnerability exists in Google Chrome UI, which can be exploited by attackers to construct a malicious web page and trick users into parsing it, which can crash the application...

Unspecified Vulnerability in Oracle Siebel UI Framework Component (CNVD-2015-00683)

Oracle Siebel is a customer relationship management software. A security vulnerability exists in the Portal Framework subcomponent of the Oracle Siebel UI Framework component, which allows remote attackers to exploit the vulnerability to compromise system confidentiality...

Unspecified Vulnerability in Oracle Siebel UI Framework Component (CNVD-2015-00685)

Oracle Siebel is a customer relationship management software. A security vulnerability in the Oracle Siebel UI Framework component, AX/HI Web UI child, allows remote attackers to exploit the vulnerability to compromise system integrity...

Unspecified Vulnerability in Oracle Siebel UI Framework Component (CNVD-2015-00687)

Oracle Siebel is a customer relationship management software. A security vulnerability exists in the Portal Framework subcomponent of the Oracle Siebel UI Framework component, which allows remote attackers to exploit the vulnerability to compromise system confidentiality...

Unspecified Vulnerability in Oracle Enterprise Manager Ops Center User Interface Framework Subpart

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. A security vulnerability in the Oracle Enterprise Manager Ops Center User Interface Framework child allows remote attackers to exploit the vulnerability to compromise system integrity...

Grinder - System to Automate the Fuzzing of Web Browsers

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes. Grinder Nodes provide an automated way to fuzz a browser, and generate useful crash information such as call stacks with symbol information as well as logging information which can be used...

CVE-2015-0388

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0417...

CVE-2015-0369

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to AX/HI Web UI...

CVE-2014-6573

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

Code injection

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

CVE-2014-6573

CVE-2014-6573 affects Oracle Enterprise Manager Grid Control’s Ops Center UI Framework in version 11.1.3 and 12.1.4. The vulnerability is described as an unspecified issue in the User Interface Framework that could allow remote attackers to impact integrity via unknown vectors. The NVD entry list...

CVE-2014-6573

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

PT-2015-4678

Name of the Vulnerable Software and Affected Versions EMC M&R aka Watch4Net versions prior to 6.5u1 ViPR SRM versions prior to 3.6.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrative user interface. These vulnerabilities allow remote...

Oracle Transportation Management Remote Vulnerability (CNVD-2015-00482)

Oracle Transportation Manager is a transportation management system developed by Oracle Corporation. A remote vulnerability in Oracle Transportation Management allows attackers to exploit the 'HTTP' protocol to compromise the 'UI Infrastructure' subcomponent...

CVE-2015-0513: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrative user interface in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified field...

PT-2015-3881

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 11.1.3 through 12.1.4 Description The issue affects the integrity of the system, related to the User Interface Framework in the Enterprise Manager Ops Center component. Recommendations For versio...

CVE-2014-6573: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

Multiple Command Execution Vulnerabilities in AlienVault OSSIM and USM

AlienVault OSSIM or Open Source Security Information Management is a popular open source security management system. AlienVault OSSIM and USM web UI allows users to automate the deployment of OSSEC agents to windows hosts, Failure to filter correctly when providing usernames and passwords can...

Cisco Unified Communications Domain Manager XSS Vulnerability

A vulnerability in the web framework of the Cisco Unified Communications Domain Manager application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface on an affected system. The vulnerability is due to imprope...