Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that should not have been available in the...

Cisco Wireless IP Phone 8821 Multiple WPA2 Vulnerabilities

Cisco Wireless IP Phone 8821 is prone to key reinstallation attacks against WPA protocol. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Code injection

A potential Man-in-the-Middle MitM attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations...

CVE-2017-14088

Trend Micro OfficeScan (11.0 and XG) is affected by a local memory-corruption vulnerability in tmwfp.sys that allows a low-privilege attacker to gain kernel-level code execution. Exploitation relies on handling of IOCTLs in tmwfp.sys, enabling privilege escalation without user interaction. Severa...

TrendMicro OfficeScan 11.0 / XG (12.0) Information Disclosure

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE-NT-DOMAIN-PHP-INFO-DISCLOSURE.txt + ISR: ApparitionSec Vendor: ================== www.trendmicro.com Product: ===========...

Cross site scripting

A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a Document Object Model DOM-based, environment or client-side cross-site scripting XSS attack. The vulnerability occurs because...

IBM Cognos Analytics Cross-Site Scripting Vulnerability (CNVD-2017-25503)

IBM Cognos Analytics formerly known as Cognos BI is a suite of business intelligence software from the American company IBM. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. A cross-site...

IBM Cognos Analytics Cross-Site Scripting Vulnerability (CNVD-2017-25501)

IBM Cognos Analytics formerly known as Cognos BI is a suite of business intelligence software from the American company IBM. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. A cross-site...

IBM Cognos Analytics Cross-Site Scripting Vulnerability (CNVD-2017-25502)

IBM Cognos Analytics formerly known as Cognos BI is a suite of business intelligence software from the American company IBM. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. A cross-site...

CVE-2017-1428

IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim...

CVE-2017-1427

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127579...

CVE-2017-1485

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128623...

CVE-2017-1535

CVE-2017-1535 affects IBM Cognos Analytics 11.0. The vulnerability is a cross-site scripting issue in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s bulletin for Financial Transaction Manager for CPS (and I...

CVE-2017-1485

CVE-2017-1485 affects IBM Cognos Analytics 11.0. The vulnerability is a cross-site scripting flaw in the Web UI that lets an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected product/version: IBM Cognos Analytics 11.0.0.0 to 11.0...

CVE-2016-9714

CVE-2016-9714 affects IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5 and 11.6. IBM’s bulletin identifies an insecure JSF ViewState in the MDM UI (Business Admin) that enables cross-site request forgery, allowing an attacker to perform unauthorized actions. The ...

CVE-2017-1309

IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463...

CVE-2017-1309

IBM InfoSphere Master Data Management Reference Data Management Hub (and related Server components) versions 11.0–11.6 store user credentials in plaintext, enabling local read by an attacker. The IBM security bulletin confirms the root cause is credentials stored in clear text and lists affected ...

Cisco IP Phone 8851 Denial of Service Vulnerability

Cisco IP Phone 8851 is a telephone product from Cisco USA that provides video and VoIP communication features. A denial of service vulnerability exists in the Session Initiation Protocol SIP implementation in the Cisco IP Phone 8851 version 11.00.1. A remote attacker could exploit this...

INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields

Stored XSS in INFOR EAM V11.0 Build 201410 via comment fields ------------------- Assigned CVE: CVE-2017-7953 Reproduction steps: ------------------- 1. Log in with your EAM account 2. Go to the jobs page 3. Click on a record and open its page 4. Go to "Comments" tab 4. Click the add new comment...

IBM Cognos Analytics Cross-Site Scripting Vulnerability (CNVD-2017-10389)

IBM Cognos Analytics formerly known as Cognos BI is a suite of business intelligence software from the American company IBM. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. A cross-site...