CVE-2015-1308: Exposure of Sensitive Information to an Unauthorized Actor

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

KDE Plasma-Workspace Security Bypass Vulnerability

KDE is an open source graphical desktop environment for UNIX. A security bypass vulnerability exists in KDE Plasma-Workspace, which allows attackers to bypass security restrictions and perform unauthorized operations...

PT-2015-5199

Name of the Vulnerable Software and Affected Versions plasma-workspace versions prior to 5.1.95 Description The issue allows remote attackers to obtain passwords by utilizing a Trojan horse Look and Feel package. Recommendations For versions prior to 5.1.95, update to version 5.1.95 or later to...

PT-2015-5200

Name of the Vulnerable Software and Affected Versions kde-workspace version 4.2.0 plasma-workspace versions prior to 5.1.95 Description The issue allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

Unspecified Vulnerability in Oracle Database Server Workspace Manager Component

Oracle Database is a large database of commercial nature. An unspecified security vulnerability in the Oracle Database Server Workspace Manager component could be exploited by remote attackers to compromise system confidentiality, integrity, and availability...

Oracle Database Multiple Vulnerabilities (January 2015 CPU)

The remote Oracle database server is missing the January 2015 Critical Patch Update CPU. It is, therefore, affected by security issues in the following components : - Core RDBMS - DBMSUTILITY - PL/SQL - Recovery - Workspace Manager - XML Developer's Kit for C %NASLMINLEVEL 70300 C Tenable Network...

CVE-2014-6578

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDOTOPO and WMSYS.LT...

Design/Logic Flaw

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDOTOPO and WMSYS.LT...

CVE-2014-6578

CVE-2014-6578 affects Oracle Database Server Workspace Manager component in Oracle Database versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability allows remote authenticated users to impact confidentiality, integrity, and availability via vectors related to SDO_TOPO and WMSYS.LT....

CVE-2014-6578

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDOTOPO and WMSYS.LT...

CVE-2014-6578: Undefined Security Weakness

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDOTOPO and WMSYS.LT...

Faraday v1.0.7 - Integrated Penetration-Test Environment a multiuser Penetration test IDE

Faraday introduces a new concept IPE Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the...

Symantec-Workspace-Virtualization-6.4.1895.0

Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit Date: 2013-7-17 Author : MJ0011 Version: Symantec Workspace Virtualization 6.4.1895.0 include "stdafx.h" include "windows.h" typedef struct UNICODESTRING USHORT Length; USHORT MaximumLength; PWSTR Buffer;...

Symantec Workspace Streaming XML-RPC Arbitrary File Upload - Ver2 (CVE-2014-1649)

An arbitrary file upload vulnerability has been reported in Symantec Workspace. The vulnerability is due to lack of access control validation in the functionality used to process XMLRPC requests. A remote unauthenticated attacker could exploit this vulnerability by a sending specially crafted...

How to configure Email Notifications when using Gmail or Google Apps Mail

Solution Select the product below to be taken to the product-specific information for using Google Gmail to send email notifications. Veeam Backup & Replication v12 Veeam Backup & Replication v13 Veeam ONE v12 Veeam ONE v13 Veeam Backup for Microsoft 365 v7+ Veeam Agent for Microsoft Windows v6+...

CVE-2014-8651: Undefined Security Weakness

The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility ntp utility name argument...

[USN-2402-1] KDE workspace vulnerabilities

========================================================================== Ubuntu Security Notice USN-2402-1 November 11, 2014 kde-workspace vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...

MGASA-2014-0480 Updated kdebase4-workspace packages fix security vulnerability and various bugs

This update fixes a security vulnerability in the KDE workspace configuration module for setting the date and time CVE-2014-8651, mga14578, and fixes some additional issues: - fix foreground color for GTK2 menus bko127861, - improve contrast for rendering checkbox marks, arrows, etc. bko337433, -...

Updated kdebase4-workspace packages fix security vulnerability and various bugs

This update fixes a security vulnerability in the KDE workspace configuration module for setting the date and time CVE-2014-8651, mga14578, and fixes some additional issues: - fix foreground color for GTK2 menus bko127861, - improve contrast for rendering checkbox marks, arrows, etc. bko337433,...

FreeBSD : kde-workspace -- privilege escalation (dafa13a8-6e9b-11e4-8ef7-5453ed2e2b49)

David Edmundson reports : KDE workspace configuration module for setting the date and time has a helper program which runs as root for performing actions. This is secured with polkit. This helper takes the name of the ntp utility to run as an argument. This allows a hacker to run any arbitrary...