CVE-2018-16782

libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmprreadrleinternal function in imagew-bmp.c...

File Upload Vulnerability in WSS Project Management System

WSS Project Management System is a browser-based collaborative office platform that integrates "Project Management", "Task Management", "Work Hour Management", "Work Log Management" and "Work Log Management". management" as one of the collaborative office platform. An arbitrary file upload...

Security Bulletin: IBM Flex System Manager (FSM) is affected by a giflib vulnerability (CVE-2016-3977)

Summary A security vulnerability has been discovered in giflib that is embedded in the IBM FSM. This bulletin addresses this vulnerability Vulnerability Details CVEID: CVE-2016-3977 DESCRIPTION: giflib is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by...

Security Bulletin: IBM Flex System Manager (FSM) is affected by libpng vulnerabilities (CVE-2015-7981, CVE-2015-8126)

Summary Vulnerabilities have been discovered in libpng that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2015-8126 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by improper bounds checking by the pngsetPLTE and...

Security Bulletin: IBM Flex System Manager (FSM) is affected by a curl vulnerability (CVE-2016-0755)

Summary A security vulnerability has been discovered in curl that is embedded in the IBM FSM. This bulletin addresses the vulnerability. Vulnerability Details CVEID: CVE-2016-0755 DESCRIPTION: Libcurl could allow a remote attacker to bypass security restrictions, caused by the failure to check...

Security Bulletin: Multiple vulnerabilities in tiff affect IBM Flex System Manager(FSM)

Summary Multiple security vulnerabilities have been discovered in tiff that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2015-8783 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by an out-of-bounds read in tifluv.c....

Security Bulletin: A vulnerability in Apache Commons affects IBM Flex System Manager(FSM) (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by FSM. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by the deserializatio...

Security Bulletin: A security vulnerability with net-snmp affects IBM Flex System Manager (CVE-2015-3565)

Summary A security vulnerability has been identified in net-snmp that is used by IBM Flex System Manager FSM. This bulletin addresses this vulnerability. Vulnerability Details CVEID: CVE-2014-3565 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by the improper handling of SNMP...

Security Bulletin: Nova Filter Scheduler bypass through rebuild action (CVE-2017-16239)

Summary OpenStack Nova could allow a remote authenticated attacker to bypass security restrictions. By rebuilding an instance, an attacker could exploit this vulnerability to achieve Filter Scheduler bypass. Vulnerability Details CVE-ID: CVE-2017-16239 Description: OpenStack Nova could allow a...

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Application Server April 2016 CPU (CVE-2016-3426, CVE-2016-3427) shipped with Tivoli Netcool Performance Manager

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server. These issues were disclosed in the Oracle April 2016 Critical Patch Update, plus four additional vulnerabilities. These may affect some configurations of IBM...

FLAC Memory Leak Vulnerability

FLAC Free Lossless Audio Codec is a free audio compression codec from the Xiph.Org Foundation that features lossless compression of audio files. A security vulnerability exists in the 'readmetadatavorbiscomment' function src/libFLAC/streamdecoder.c file in FLAC version 1.3.2. An attacker can...

CVE-2017-6888

An error in the "readmetadatavorbiscomment" function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file...

CVE-2017-6888

An error in the "readmetadatavorbiscomment" function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file...

PYSEC-2018-10

Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request...

CVE-2018-9856

Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request...

Kotti Cross-Site Request Forgery Vulnerability

Kotti is a Pythonic Web application framework based on Pyramid and SQLAlchemy , which includes a set of scalable content management system . A cross-site request forgery vulnerability exists in the local role implementation in Kotti versions prior to 1.3.2 and 2.x versions prior to 2.0.0b2. A...

[SECURITY] Fedora 27 Update: libldb-1.3.2-1.fc27

An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases...

OmniAuth Information Disclosure Vulnerability

OmniAuth is a set of authentication system using Rack middleware implementation . An information disclosure vulnerability exists in the strategy.rb file in versions of OmniAuth prior to 1.3.2, which stems from the program failing to properly protect the authenticitytoken value. An attacker could...

DragonByte Technologies vBDownloads for vBulletin Cross-Site Scripting Vulnerability

DragonByte Technologies vBDownloads for vBulletin is a download module for vBulletin open source commercial web forum program from DragonByte Technologies, Scotland. A cross-site scripting vulnerability exists in the downloads/actions/editdownload.php file in DragonByte Technologies vBDownloads f...

ImageWorsener Denial of Service Vulnerability

ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the 'getrawsampleint' function in the imagew-main.c file of the libimageworsener.a file in ImageWorsener version 1.3.2. When libjpeg 8d is used, an attacker can exploit this vulnerability to cause...