PT-2016-4248

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality and integrity, potentially allowing remote attackers to bypass authentication and gain administrator access. It is related ...

PT-2016-4252

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality and integrity, potentially allowing remote attackers to bypass authentication. It is related to Load Testing for Web Apps...

PT-2016-4247

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality and integrity, potentially allowing remote attackers to bypass authentication. It is related to the Test Manager for Web Ap...

PT-2016-4244

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality and is related to the Test Manager for Web Apps in the Oracle Application Testing Suite component. It is claimed by third...

PT-2016-4249

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality, integrity, and availability. It is related to the Test Manager for Web Apps in the Oracle Application Testing Suite...

CVE-2016-0482: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0486: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0491: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous information is from...

CVE-2016-0490: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than...

CVE-2016-0480: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0481,...

Wordpress weever-apps-20-mobile-web-apps Shell Upload Exploit

Exploit for php platform in category web applications Exploit Title: Wordpress weever-apps-20-mobile-web-apps Shell Upload Exploit Software Link: http://weeverapps.com/product/cms/ Version:all Version Google dork1: inurl:/wp-content/plugins/weever-apps-20-mobile-web-apps The code in...

These Top 10 Programming Languages Have Most Vulnerable Apps on the Internet

A new research showed that Scripting languages, in general, give birth to more security vulnerabilities in web applications, which raised concerns over potential security bugs in millions of websites. The app security firm Veracode has released its State of Software Security: Focus on Application...

CVE-2015-6093: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office...

Microsoft Office Web Apps Memory Corruption Vulnerability (3104540)

This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

PT-2015-2688

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2016 Word Automation Services on SharePoint Server versions 2010 SP2 through 2013 SP1 Office Web Apps versions 2010 SP2 through 2013 SP1 SharePoint Server versions 2010 SP2 through 2013 SP1 Descriptio...

Microsoft Office Web Apps Cross-Site Scripting Vulnerability

Microsoft Office Web Apps Server is an Office Server product from the U.S. company Microsoft Microsoft that provides browser-based file viewing and editing capabilities for Office documents. A cross-site scripting vulnerability exists in Microsoft Office Web Apps Server. An attacker could exploit...

CVE-2015-6037

Cross-site scripting XSS vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or...

CVE-2015-6037

Cross-site scripting XSS vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or...

CVE-2015-6037

CVE-2015-6037 is an XSS vulnerability affecting Microsoft Office Web Apps/Excel Services across SharePoint Server 2010 SP2, SharePoint 2013 SP1, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1 and SharePoint Foundation 2013 SP1. The issue allows remote authenticated users to inject arbitr...