Microsoft Open Enclave SDK CVE-2019-1370 Information Disclosure Vulnerability

Description Microsoft Open Enclave SDK is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Open Enclave SDK Recommendations Permit local access for trusted individual...

KLA11607 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual Studio can be exploited remotely ...

Security Bulletin: Security vulnerability affects the Report Builder that is shipped with Jazz Reporting Service (CVE-2017-1370)

Summary There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2017-1370 DESCRIPTION: IBM Jazz Reporting Service JRS could disclose sensitive information, including user credentials, through an error message from the Report...

Security Bulletin: Security vulnerability has been identified in Jazz Reporting Service shipped with Rational Insight (CVE-2017-1370)

Summary Jazz Reporting Service is shipped as a component of Rational Insight. Information about a security vulnerability affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details CVEID: CVE-2017-1370 DESCRIPTION: IBM Jazz Reporting Service JRS could disclos...

Security Bulletin: Security vulnerability has been identified in Jazz Reporting Service shipped with Rational Reporting for Development Intelligence (CVE-2017-1370)

Summary Jazz Reporting Service is shipped as a component of Rational Reporting for Development Intelligence RRDI. Information about a security vulnerability affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details CVEID: CVE-2017-1370 DESCRIPTION: IBM Jazz...

CVE-2018-1370

CVE-2018-1370 affects IBM Security Guardium Big Data Intelligence (SonarG) 3.1. The flaw is an incorrect permission assignment for a security-critical resource, allowing read/modify by unintended actors. The IBM bulletin lists a CVSS v3 base score of 4.2 and notes remediation is to upgrade to an ...

openSUSE Security Update : libapr-util1 (openSUSE-2017-1370)

This update for libapr-util1 fixes the following issues : Security issue fixed : - CVE-2017-12618: DoS via crafted SDBM database files in aprsdbm functions bsc1064990 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2015-1370

creationtimestamp| type| source ---|---|--- 2017-10-24 18:33:36+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cfjh-p3g4-3q2f...

@arakoodev/edgechains.js (>=0.25.0, <=0.30.1), @barnas2/polymer (1.0.0) +745 more potentially affected by CVE-2015-1370 via marked (>=0.0.1, <=0.3.2)

marked NPM version =0.0.1, =0.25.0, =0.0.1, =0.1.0, =2.0.1, =26.0.1, =0.5.0, =0.7.1 - @qsb-cli-test/command 1.0.10 and more Source cves: CVE-2015-1370 Source advisory: OSV:GHSA-CFJH-P3G4-3Q2F...

CVE-2017-1370

CVE-2017-1370 affects IBM Jazz Reporting Service (JRS) versions 5.0–6.0 (as shipped with RRDI/Rational Insight). The vulnerability allows disclosure of sensitive information, including user credentials, via an error message on the Report Builder administrator configuration page. IBM security bull...

CVE-2016-1370

Cisco Prime Network Analysis Module (NAM) prior to 6.2(1-b) is affected by CVE-2016-1370 due to improper calculation of IPv6 payload length in the IPv6 decode function. This can be exploited remotely by unauthenticated attackers sending crafted IPv6 packets to cause a denial of service, including...

DEBIAN-CVE-2015-1370

Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting XSS attacks via a vbscript tag in a link...

CVE-2015-1370

Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting XSS attacks via a vbscript tag in a link...

CVE-2015-1370

CVE-2015-1370 affects the marked library (versions 0.3.2 and earlier) used with Node.js. The root cause is an incomplete blacklist that allows cross-site scripting via a vbscript tag in a link, enabling remote XSS. Public references (GHSA, OSV, NVD, CNVD) corroborate the issue and advise upgradin...

APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003 OS X Mavericks 10.9.4 and Security Update 2014-003 are now available and address the following: Certificate Trust Policy Available for: OS X Lion v10.7.5, OS X Lion Server v10.7....

CVE-2014-1370

CVE-2014-1370: Apple OS X copyfile handling of AppleDouble in ZIP archives allows out-of-bounds memory access, enabling remote code execution or DoS. Affects OS X up to 10.9.3; fixed in 10.9.4 Security Update 2014-003.

Mac OS X Multiple Vulnerabilities (Security Update 2014-003)

The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-003 applied. This update contains several security-related fixes for the following components : - copyfile - Dock - Graphics Driver - Intel Graphics Driver - Intel Compute - IOAcceleratorFamily -...

openSUSE Security Update : flash-player (openSUSE-SU-2013:0295-2)

Adobe Flash Player was updated to 11.2.202.270: bnc803485 - APSB13-05, CVE-2013-1372, CVE-2013-0645, CVE-2013-1373, CVE-2013-1369, CVE-2013-1370, CVE-2013-1366, CVE-2013-0649, CVE-2013-1365, CVE-2013-1374, CVE-2013-1368, CVE-2013-0642, CVE-2013-0644, CVE-2013-0647, CVE-2013-1367, CVE-2013-0639,...

openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:0298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:0295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...