Critical Photon OS Security Update - PHSA-2020-0285

Updates of 'apache-tomcat' packages of Photon OS have been released...

Security Bulletin: Vulnerabilities in OpenSSL affects Rational Application Developer for WebSphere Software

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by the Cordova platform packaged with Rational Application Developer for WebSphere Software and has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-0207 DESCRIPTION: OpenS...

Security Bulletin: IBM i is affected by several OpenSSL vulnerabilities.

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM i. IBM i has addressed the applicable CVEs provided by OpenSSL Vulnerability Details CVEID: CVE-2015-0207 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an implementation error in t...

SAP Crystal Reports Information Disclosure

Exploit Title: Sensitive Information Disclosure in SAP Crystal Reports Date: 2019-04-10 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114 Version: SAP Crystal Reports for Visual Studio, Version - 2010...

SAP Crystal Reports - Information Disclosure

SAP Crystal Reports - Information Disclosure Exploit Title: Sensitive Information Disclosure in SAP Crystal Reports Date: 2019-04-10 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114 Version: SAP Crystal...

CVE-2019-0285

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio fixed in version 2010 discloses sensitive database information including credentials which can be misused by the attacker...

CVE-2019-0285

SAP Crystal Reports for Visual Studio contains a vulnerability in the .NET SDK WebForm Viewer where the viewer discloses sensitive database information, including credentials. The issue affects the WebForm Viewer component used by the SAP Crystal Reports for Visual Studio environment and is descr...

Security Bulletin: Vulnerabilities in OpenSSL affect MegaRAID Storage Manager

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by MegaRAID Storage Manager. MegaRAID Storage Manager has addressed the applicable CVEs. Vulnerability Details Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL...

CVE-2018-0285

CVE-2018-0285 affects Cisco Prime Service Catalog. The issue arises from excessive logging that exhausts disk space, enabling an authenticated, remote attacker to deny service to the user interface. Data from NVD and Cisco advisories confirm the vulnerability is a disk-space exhaustion DoS via lo...

RHEL 6 : flash-plugin (RHSA-2018:0285)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0285 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to...

Microsoft Windows Uniscribe Information Disclosure Vulnerability(CVE-2017-0285)

We have encountered a crash in the Windows Uniscribe user-mode library, in the USP10!SubstituteNtoM function, while trying to display text using a corrupted TTF font file: --- 69c.164: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling...

Information disclosure

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows improper disclosure of memory contents, aka "Window...

CVE-2017-0285

CVSS context : CVE-2017-0285 is an information-disclosure vulnerability in Windows Uniscribe. The connected document KLA11039 lists an information-disclosure vulnerability in Windows Uniscribe that can be exploited remotely via specially crafted documents to obtain sensitive information. What is ...

Microsoft Windows Multiple Vulnerabilities (KB4022727)

This host is missing a critical security update according to Microsoft KB4022727 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4022722)

This host is missing a critical security update according to Microsoft KB4022722 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4022725)

This host is missing a critical security update according to Microsoft KB4022725 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA11049 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. An improper validating of input before loading...

Windows 8.1 and Windows Server 2012 R2 June 2017 Security Updates

The remote Windows host is missing security update 4022717 or cumulative update 4022726. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Hyper-V instruction emulation due to a failure to properly enforce privilege levels. An...

CVE-2016-0285

CVE-2016-0285 is an XSS vulnerability in IBM Jazz-based CLM stack (RCLM, RQM, RTC, RDNG, RELM, Rhapsody DM, RSA DM). The issue affects multiple versions across 3.0.1.6 up to 6.0.x, where remote authenticated users could inject arbitrary web script or HTML via a crafted field, resulting in script ...

Mageia: Security Advisory (MGASA-2015-0285)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...