740 matches found
Cisco Unity Express Operating System Command Injection Vulnerability
Cisco Unity Express CUE is a set of voice communication solutions from the American company Cisco Cisco. The product includes features such as voicemail and interactive voice response IVR. An operating system command injection vulnerability exists in Cisco CUE versions prior to 10.1, which stems...
USN-4195-2: MariaDB vulnerabilities
USN-4195-1 fixed multiple vulnerabilities in MySQL. This update provides the corresponding fixes for CVE-2019-2974 in MariaDB 10.1 and CVE-2019-2938, CVE-2019-2974 for MariaDB 10.3. Ubuntu 18.04 LTS has been updated to MariaDB 10.1.43. Ubuntu 19.04 and 19.10 has been updated to MariaDB 10.3.20. I...
Input validation
Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection...
CVE-2019-0369
CVE-2019-0369 affects SAP Financial Consolidation prior to versions 10.0 and 10.1. The vulnerability arises because user-controlled inputs are not sufficiently encoded when uploading files containing scripts, enabling a reflected cross-site scripting (XSS) issue in the web application. Documents ...
CVE-2019-0369
SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability...
SAP Financial Consolidation Multiple Unspecified Security Vulnerabilities
Description SAP Financial Consolidation is prone to multiple unspecified security vulnerabilities. Limited information is currently available regarding these issues. We will update this BID as more information emerges. SAP Financial Consolidation versions 10.0 and 10.1 are vulnerable. Technologie...
GitLab Code Issue Vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A code issue vulnerability exists in GitLab Enterprise an...
Security Bulletin: Cross-Site Request Forgery in IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2013-5427)
Summary Due to insufficient safeguards against cross-site request forgery, an attacker can trick a legitimate user into opening a URL that results in an action being taken as that user, potentially without the knowledge of that user. Any actions taken require that the legitimate user be already...
Ubuntu: Security Advisory (USN-4070-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-1921
IBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152857...
Design/Logic Flaw
GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue...
CVE-2017-11580
CVE-2017-11580 affects Blipcare BP700 10.1 devices where memory corruption triggers a denial of service. The root cause is a small 256 KB Wi‑Fi memory footprint, enabling an unsafe string copy (memcpy/strcpy) in HTTP header handling that can fill memory and halt the device. Testing notes referenc...
PT-2019-16869 · Ibm · Db2
Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description: The issue allows a malicious user with access to the DB2 instance account to leverage a fenced execution process and execute...
PT-2019-17052 · Ibm · Ibm Campaign
Name of the Vulnerable Software and Affected Versions: IBM Campaign versions 9.1.2 through 10.1 Description: The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing dot dot sequences ../ to view arbitrary files on the system...
PT-2019-7873 · Ibm · Ibm Marketing Platform
Name of the Vulnerable Software and Affected Versions: IBM Marketing Platform versions 9.1.0 through 10.1 Description: The issue exposes sensitive information in the headers, which could be used by an authenticated attacker in further attacks against the system. Recommendations: For versions 9.1....
Ubuntu 18.04 LTS : MariaDB vulnerabilities (USN-3957-3)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3957-3 advisory. USN-3957-1 fixed multiple vulnerabilities in MySQL. This update provides the corresponding fixes for CVE-2019-2614 and CVE-2019-2627 in MariaDB 10.1...
Ubuntu: Security Advisory (USN-3957-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3957-3: MariaDB vulnerabilities
USN-3957-1 fixed multiple vulnerabilities in MySQL. This update provides the corresponding fixes for CVE-2019-2614 and CVE-2019-2627 in MariaDB 10.1. Ubuntu 18.04 LTS has been updated to MariaDB 10.1.40. In addition to security fixes, the updated package contain bug fixes, new features, and...
USN-3957-3 mariadb-10.1 vulnerabilities
USN-3957-1 fixed multiple vulnerabilities in MySQL. This update provides the corresponding fixes for CVE-2019-2614 and CVE-2019-2627 in MariaDB 10.1. Ubuntu 18.04 LTS has been updated to MariaDB 10.1.40. In addition to security fixes, the updated package contain bug fixes, new features, and...