Cisco Data Center Network Manager Arbitrary File Upload Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An arbitrary file upload vulnerability exists in the web-based management interfac...

Cisco Data Center Network Manager Unauthenticated Remote Code Execution

DCNM exposes a file upload servlet FileUploadServlet at /fm/fileUpload. An authenticated user can abuse this servlet to upload a WAR to the Apache Tomcat webapps directory and achieve remote code execution as root. This module exploits two other vulnerabilities, CVE-2019-1619 for authentication...

CVE-2019-4139

IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

IBM Cognos Analytics Cross-Site Scripting Vulnerability (CNVD-2019-25041)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A cross-site scripting...

IBM Robotic Process Automation with Automation Anywhere Cross-Site Scripting Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. A cross-site scripting vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0, which can be exploited by remote attackers to inject arbitrary...

IBM Robotic Process Automation with Automation Anywhere Path Traversal Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. A path traversal vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0. A remote attacker can send a path traversal vulnerability by sending a...

IBM Robotic Process Automation with Automation Anywhere Information Disclosure Vulnerability (CNVD-2018-22536)

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0. An attacker could exploit the vulnerability to obtain...

CVE-2018-1552

CVE-2018-1552 affects IBM Robotic Process Automation with Automation Anywhere, versions 10.0 and 11.0. The vulnerability stems from a missing restriction on the types of files that can be uploaded to the control room, enabling a remote attacker to upload a malicious file and trick a user into exe...

CVE-2018-6689

CVE-2018-6689 corresponds to an Authentication Bypass in McAfee Data Loss Prevention Endpoint (DLPe). The vulnerability affects DLPe 10.0.x before 10.0.510 and 11.0.x before 11.0.600, enabling bypass of local security protections under specific conditions. Affected products/versions are confirmed...

Progress Sitefinity CMS Cross-Site Scripting Vulnerability

Progress Sitefinity CMS is an open source platform for building corporate websites and intranets. A cross-site scripting vulnerability exists in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

CVE-2018-17056

Cross-site scripting XSS vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-8989

CVE-2017-8989 affects HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows. The vulnerability enables remote URL redirection. Root cause and vulnerable component details are not elaborated in the provided documents. No remediation or exploit information is present in the supplied materia...

Information disclosure

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. Information Disclosure can occur because the Prometheus metrics feature discloses private project pathnames...

Intel Quartus II Elevation of Privilege Vulnerability

Intel Quartus II is a suite of software for hardware programming from the American company Intel Intel. An elevation of privilege vulnerability exists in Intel Quartus II versions 11.0 through 15.0. A local attacker could exploit this vulnerability to execute arbitrary code...

CVE-2018-3687

Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code...

Trend Micro OfficeScan Multiple Vulnerabilities (1119961)

Trend Micro OfficeScan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Bulletin: Vulnerabilities in OpenSSH affect IBM XIV Gen3 (CVE-2016-0777, CVE-2016-0778)

Summary An information leak flaw and buffer overflow flaw in the way the OpenSSH client roaming feature was implemented affects IBM XIV Gen3. Vulnerability Details CVEID: CVE-2016-0777 DESCRIPTION: OpenSSH could allow a remote attacker to obtain sensitive information, caused by a client informati...

Security Bulletin: Multiple Security Vulnerabilties have been addressed in LCMS Premier on Cloud 11.0

Summary Multiple Security Vulnerabilties have been addressed in LCMS Premier on Cloud 11.0 Vulnerability Details CVEID: CVE-2017-1142 DESCRIPTION: IBM Kenexa LCMS Premier on Cloud could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the...

Security Bulletin: Privilege escalation vulnerability in IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-3063)

Summary A vulnerability in IBM® InfoSphere® Master Data Management - Collaborative Edition might allow an escalation of privilege attack. Vulnerability Details CVE ID: CVE-2014-3063 Description: IBM® InfoSphere® Master Data Management - Collaborative Edition contains a vulnerability that might...

Security Bulletin: IBM Cognos Analytics : IBM Cognos Analytics is affected by CVE-2016-0398

Summary This bulletin addresses a recently discovered content spoofing vulnerability. Vulnerability Details CVEID: CVE-2016-0398 DESCRIPTION: IBM Cognos Analytics is vulnerable to content spoofing when an attacker familiar with CA can convince a user to click on a malicious link. CVSS Base Score:...