PT-2016-3922

Name of the Vulnerable Software and Affected Versions Redmine versions prior to 2.6.9 Redmine versions 3.0.x prior to 3.0.7 Redmine versions 3.1.x prior to 3.1.3 Description The issue allows remote attackers to obtain sensitive information by viewing an Atom feed. This is due to a problem in the...

PT-2016-3894

Name of the Vulnerable Software and Affected Versions Redmine versions prior to 2.6.8 Redmine versions 3.0.x prior to 3.0.6 Redmine versions 3.1.x prior to 3.1.2 Description The issue allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form...

Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Business Views Catalog Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability in the Oracle E-Business Suite Oracle E-Business Intelligence Business Views Catalog component allows remote attackers to exploit the vulnerability by submitting a special request to...

CVE-2016-0510

Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Views Catalog...

CVE-2016-0510

Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Views Catalog...

Design/Logic Flaw

Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Views Catalog...

CVE-2016-0510

The CVE-2016-0510 entry covers an unspecified vulnerability in Oracle E-Business Intelligence within Oracle E-Business Suite 11.5.10.2, related to the Business Views Catalog. The description states remote attackers could affect confidentiality and integrity via unknown vectors. No concrete root c...

CVE-2016-0510: Undefined Security Weakness

Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Views Catalog...

PT-2016-4263

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 11.5.10.2 Description The issue affects confidentiality and integrity, and it is related to Business Views Catalog in the Oracle E-Business Intelligence component. The vectors related to this issue are unknown...

The vulnerability of the iOS operating system allows a hacker to gain access to sensitive information related to web page views, mouse movements, and network traffic.

The vulnerability of the WebKit component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to sensitive information about web page views, mouse movements, and network traffic using JavaScript...

Mango Automation 2.6.0 - Multiple Vulnerabilities

Mango Automation 2.6.0 - Multiple Vulnerabilities Mango Automation 2.6.0 CSRF File Upload And Arbitrary JSP Code Execution Vendor: Infinite Automation Systems Inc. Product web page: http://www.infiniteautomation.com/ Affected version: 2.5.2 and 2.6.0 beta build 327 Summary: Mango Automation is a...

Zaption: CSV Excel Macro Injection in Export Response

Scenario: An attacker creates a response like =AND21 in a tour that allows open response or discussion. Then when a user who created this tour clicks analytic and clicks to export responses as csv, he will see TRUE instead of =AND12 Meaning that cell is now active, and an attacker could make a...

Drupal Administration Views Module Information Disclosure Vulnerability

Drupal is a free, open source content management system developed in PHP.Administration Views module for Drupal is a module for Drupal that replaces the administration overview or listings pages. A security vulnerability in versions 7.x-1.x prior to 7.x-1.x of the Drupal Administration Views modu...

CVE-2015-7226

The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler...

Information disclosure

The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler...

CVE-2015-7226

CVE-2015-7226 affects the Drupal contributed module Administration Views (7.x) , specifically versions in the 7.x-1.x branch prior to 7.x-1.5. The root cause is that access checks are performed based on the router path extracted from the view rather than the view’s display property, enabling info...

CVE-2015-7226

The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler...

PT-2015-7476

Name of the Vulnerable Software and Affected Versions Administration Views module versions 7.x-1.x through 7.x-1.4 Description The issue allows remote attackers to obtain sensitive information via vectors related to the access handler, due to the module checking access permissions based on the...

CVE-2015-7226: Exposure of Sensitive Information to an Unauthorized Actor

The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler...

[SECURITY] Fedora 22 Update: drupal6-views_bulk_operations-1.17-1.fc22

This module augments Views by allowing bulk operations to be executed on the displayed rows. It does so by showing a checkbox in front of each node, and adding a select box containing operations that can be applied. Drupal Core or Rules actions can be used. This package provides the following...