123 matches found
Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack (CVE-2017-1127, CVE-2017-1128)
Summary Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack. Vulnerability Details CVEID: CVE-2017-1127 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed...
CVE-2017-1128
IBM DOORS Next Generation (DNG/RRC) versions affected: 4.0, 5.0, and 6.0. The Web UI is vulnerable to cross-site scripting via embedded JavaScript, enabling potential credential disclosure in a trusted session. Root cause: reflected/stored XSS in the Web UI (details are described in the IBM Secur...
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2016-1063
Technical details for CVE-2016-1063 are not publicly provided in the connected documents. The supplied sources do not specify affected products, versions, root cause, or remediation beyond the general description. Monitor for updates.
CVE-2016-1128
Technical details for CVE-2016-1128 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
Gallery 2 < 2.0.2 - Multiple Vulnerabilities
Gallery 2 Multiple Vulnerabilities Vendor: Bharat Mediratta Product: Gallery 2 Version: = 2.0.2 Website: http://gallery.menalto.com/ BID: 16940 CVE: CVE-2006-1127 CVE-2006-1128 OSVDB: 23596 23597 SECUNIA: 19104 PACKETSTORM: 44358 Description: Gallery2, the open source web based photo album...
Oracle: Security Advisory (ELSA-2010-0919)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Safari Multiple Vulnerabilities -01 (Apr 2015) - Mac OS X
Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...
CVE-2015-1128
The CVE-2015-1128 entry describes a vulnerability in Apple Safari’s private-browsing mode where push-notification requests can reveal a user’s browsing history. Affected products are Safari versions prior to 6.2.5, 7.x prior to 7.1.5, and 8.x prior to 8.0.5. Root cause: a flaw in how private brow...
Mac OS X : Apple Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.5 / 7.1.5 / 8.0.5. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the state management which can result in the user's browser history not being fully purged from 'history.plist'...
Oracle Solaris Third-Party Patch Update : freetype (multiple_denial_of_service_dos1)
The remote Solaris system is missing necessary patches to address security updates : - FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly...
openSUSE Security Update : freetype2 (openSUSE-SU-2012:0489-1)
Specially crafted font files could cause buffer overflows in freetype %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-220. The text description of this plugin is C SUSE LLC...
CVE-2013-3319
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128...
Design/Logic Flaw
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128...
CVE-2013-3319
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128...
Oracle Linux 5 : Important: / autofs (ELSA-2007-1128)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-1128 advisory. 5.0.1-0.rc2.55.el5.1 - Bug 410041: CVE-2007-5964 autofs defaults don't restrict suid in /net - use mount option nosuid for -hosts map unless suid is explicily...
CVE-2013-1128
Multiple cross-site request forgery CSRF vulnerabilities in the server in Cisco Unified MeetingPlace before 7.12.2000 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are obtained from third party...