122 matches found
Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix
Summary WebSphere Application Server may have insecure file permissions after custom startup scripts are run. The custom startup script will not pull the umask from the server.xml. This may cause some log files to have different permissions then expected. There is an information disclosure in the...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2017-1381)
Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details See the Security Bulletin WebSphere Appplication Server Proxy...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition (CVE-2017-1381)
Summary WebSphere Application Server is shipped as a component of IBM Business Process Manager, WebSphere Process Server, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition. WebSphere Application Server Liberty is shipped as a component of the optional BPM component Process Federati...
Security Bulletin: Information disclosure in WebSphere Application Server (CVE-2017-1381)
Summary There is an information disclosure in the WebSphere Application Server Proxy Server or On-Demand-Router ODR. This only occurs when the system clock is changed. If the system clock is changed it could cause stale data to be cached and served. Vulnerability Details CVEID: CVE-2017-1381...
Debian: Security Advisory (DLA-1381-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-1381
IBM WebSphere Application Server Proxy Server or On-demand-router ODR 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152...
CVE-2017-1381
The CVE-2017-1381 issue affects IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) in WAS versions 7.0–9.0. The vulnerability is caused by stale data being cached and then served, enabling a local attacker to obtain sensitive information. IBM security bulletins linked to this...
Oracle Linux 5 : sudo (ELSA-2017-1381)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2017-1381 advisory. 1.7.2p1-29.0.1 - Fix CVE-2017-1000367 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...
CVE-2013-1381
This CVE entry is rejected/not used; the ID does not correspond to an active vulnerability.
CVE-2016-1381
CVE-2016-1381 concerns Cisco AsyncOS on Web Security Appliance (WSA) versions 8.5–9.0 before 9.0.1-162. The issue is a memory leak in the cached file-range request path: an unauthenticated, remote attacker can open multiple connections that request file ranges from cached content, causing memory ...
CVE-2015-1381
Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service segmentation fault or memory consumption via unspecified vectors...
CVE-2015-1381
CVE-2015-1381 affects Privoxy prior to 3.0.23, with multiple vulnerabilities in pcrs.c that can cause a denial of service (segmentation fault or memory consumption) via unspecified vectors. The connected sources consistently tie this CVE to Privoxy 3.0.23 as the fixed version and mention related ...
[SECURITY] [DSA 3145-1] privoxy security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3145-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 30, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 142-1] privoxy security update
Package : privoxy Version : 3.0.16-1+deb6u1 CVE ID : CVE-2015-1031 CVE-2015-1381 CVE-2015-1382 Several vulnerabilities have been fixed in privoxy, a privacy enhancing HTTP proxy: CVE-2015-1031, CID66394: unmap: Prevent use-after-free if the map only consists of one item. CVE-2015-1031, CID66376 a...
DLA-142-1 privoxy - security update
Bulletin has no description...
privoxy -- multiple vulnerabilities
Privoxy Developers reports: Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled the default they could previously cause Privoxy to abort. Reported by Matthew Daley. CVE-2015-1380. Fixed multiple segmentation faults and memory leaks...
Apple Mac OS X Multiple Vulnerabilities -01 (Sep 2014)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-1381
Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted call...
CVE-2014-1381
Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted call...