Directory traversal

Directory traversal vulnerability in ppmd 10.1-5...

CVE-2015-1199

Directory traversal vulnerability in ppmd 10.1-5...

CVE-2015-1199

Directory traversal vulnerability in ppmd 10.1-5...

CVE-2015-1199

CVE-2015-1199 affects the ppmd compression component, with multiple sources describing a directory traversal vulnerability in ppmd 10.1-5. CNVD-2017-30599 explains that an attacker can exploit a crafted request (directory traversal sequence) to read arbitrary files, indicating the underlying issu...

DSA-3955-1 mariadb-10.1 - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3955-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Emptoris Strategic Supply Management Information Disclosure Vulnerability

The IBM Emptoris Strategic Supply Management Platform is a common Web-based portal for accessing the Emptoris suite of products from IBM. An information disclosure vulnerability exists in IBM Emptoris Strategic Supply Management Platform versions 10.0 and 10.1, which is caused by the program...

CVE-2016-6021

IBM Emptoris Strategic Supply Management Platform versions 10.0 and 10.1 are affected by a cross-site scripting vulnerability in the Web UI (CVE-2016-6021). The flaw could allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. Affected prod...

IBM Emptoris Supplier Lifecycle Management Open Redirect Vulnerability

IBM Emptoris Supplier Lifecycle Management is a suite of automated management solutions from IBM USA. The product automates all business processes associated with suppliers. An open redirect vulnerability exists in IBM Emptoris Supplier Lifecycle Management versions 10.0.x through 10.1.x. The...

Open redirect

IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2016-6121

Summary of technical details (CVE-2016-6121) : IBM Emptoris Supplier Lifecycle Management (SLM) versions 10.0.x–10.1.x are vulnerable to cross-site scripting (stored/reflected in the Web UI), enabling an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted...

CVE-2016-8949

CVE-2016-8949 affects IBM Emptoris Supplier Lifecycle Management 10.0.x–10.1.1.x. A remote attacker could exploit an open redirect to spoof the URL and lure victims to a malicious site, enabling phishing and potential data exposure. IBM’s Security Bulletin for Emptoris SLM documents the vulnerabi...

CVE-2017-1448

CVE-2017-1448 affects IBM Emptoris Supplier Lifecycle Management 10.0.x–10.1.x. The vulnerability is an open redirect that could be exploited by an attacker to spoof the displayed URL and redirect victims to a malicious site, enabling phishing and potential data exposure. IBM security bulletin de...

CVE-2016-9714

IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119727...

CVE-2016-9714

CVE-2016-9714 affects IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5 and 11.6. IBM’s bulletin identifies an insecure JSF ViewState in the MDM UI (Business Admin) that enables cross-site request forgery, allowing an attacker to perform unauthorized actions. The ...

CVE-2017-1267

IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 124742...

CVE-2017-1267

CVE-2017-1267 affects IBM Security Guardium. The IBM security bulletin confirms a vulnerability where Guardium processes patches, image backups and other updates without adequately verifying the origin and integrity of the code. Affected are Guardium versions 9.0, 9.1, 9.5 and 10.0, 10.0.1, 10.1,...

IBM Emptoris Contract Management Information Disclosure Vulnerability (CNVD-2017-21772)

IBM Emptoris Contract Management is a suite of software from IBM USA that automates the contract lifecycle. The software automates and manages all phases of the contract lifecycle, from the creation, execution and renegotiation of contracts and amendments, to performance monitoring, analysis and...

CVE-2016-6018

IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...

CVE-2016-8947

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...