Design/Logic Flaw

In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv implementation may allow an attacker to write past the end of an output buffer. Depending on the...

PT-2019-9593 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 Description: The issue allows for a XML External Entity Injection XXE attack when processing XML data, potentially enabling a remote attacker to expose sensitive information or...

Security Bulletin: IBM InfoSphere Information Server is affected by an Information Disclosure vulnerability

Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2018-1917 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticated user to access jsp files and disclose sensitive information. CVSS Base Score:...

Security fix for the ALT Linux 8 package postgresql11 version 11.3-alt0.M80P.1

11.3-alt0.M80P.1 built May 14, 2019 Alexei Takaseev in task 229145 May 9, 2019 Alexei Takaseev - 11.3 - Fixes CVE-2019-10129, CVE-2019-10130...

Security fix for the ALT Linux 10 package postgresql12 version 11.3-alt1

May 8, 2019 Alexei Takaseev 11.3-alt1 - 11.3 - Fixes CVE-2019-10129, CVE-2019-10130...

Security Bulletin: IBM InfoSphere Information Server is affected by a XXE (XML External Entity) Injection vulnerability

Summary An XXE XML External Entity Injection vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2018-1845 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote...

Security Bulletin: IBM InfoSphere Data Quality Exception Console is affected by a Reflected XSS (Cross-Site Scripting) vulnerability

Summary A Reflected XSS Cross-Site Scripting vulnerability was addressed by IBM InfoSphere Data Quality Exception Console. Vulnerability Details CVEID: CVE-2019-4238 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Security Bulletin: IBM InfoSphere Governance Catalog is affected by an Improper Access Control vulnerability

Summary An Improper Access Control vulnerability was addressed by IBM InfoSphere Governance Catalog. Vulnerability Details CVEID: CVE-2018-1899 DESCRIPTION: IBM InfoSphere Information Server could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due...

Memory corruption

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.3, tvOS 11.3, watchOS 4.3, Safari 11.1, iTunes 12.7.4 for Windows, iCloud for Windows 7.4...

CVE-2018-1895

CVE-2018-1895 affects IBM InfoSphere Information Server (and IBM InfoSphere Information Governance Catalog) versions 11.3, 11.5, and 11.7 with a cross-site scripting (XSS) flaw in the Web UI. The IBM bulletin describes it as a Reflected XSS affecting the Web UI, enabling an attacker to inject arb...

CVE-2018-4213

The CVE-2018-4213 issue affects multiple Apple platforms: iOS (pre-11.3), Safari (pre-11.1), iCloud for Windows (pre-7.4), tvOS (pre-11.3), watchOS (pre-4.3), and iTunes for Windows (pre-12.7.4). The root cause is an unexpected interaction that could cause an ASSERT failure, addressed by improved...

CVE-2018-4212

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks...

CVE-2018-4208

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks...

GitLab CE/EE Information Disclosure Vulnerability (CNVD-2018-26955)

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. An information...

CVE-2018-18642

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has XSS...

About the security content of tvOS 11.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30940)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Kernel subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30943)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Kernel subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3...

Oracle Solaris Critical Patch Update : oct2018_SRU11_4_0_0_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon RAD. The supported version that is affected is 11.3. Easily exploitable vulnerability...

Oracle Solaris Denial of Service Vulnerability (CNVD-2018-21491)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Kernel Zones Virtualized NIC Driver subcomponent of version 11.3 of the Solaris component of th...