CVE-2018-1439

Affected software: IBM Rational Quality Manager (RQM) 5.0–5.02 and 6.0–6.0.6. Vulnerability: Cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Root cause/impact (as stated): Web UI XSS; affec...

Debian: Security Advisory (DLA-1439-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Privilege escalation vulnerabilities affect IBM® Db2® (CVE-2017-1439, CVE-2017-1451)

Summary Vulnerabilities in IBM Db2 could allow a local user to gain elevated privilege. Vulnerability Details CVEID: CVE-2017-1439 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user with DB2 instance owner privileges to obtain root access. CVSS...

Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM Predictive Maintenance and Quality

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality. Information about some security vulnerabilities affecting IBM DB2 have been published their respective security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section. Affecte...

CVE-2017-1439

IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 includes DB2 Connect Server could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128058...

CVE-2017-1439

CVE-2017-1439 affects IBM DB2 LUW (DB2 Connect Server) across 9.7, 10.1, 10.5, and 11.1. Description: a local user with DB2 instance owner privileges could obtain root access. Connected IBM advisories confirm vulnerability presence and provide remediation paths: apply fix packs/fixes for each rel...

CVE-2008-1439

...

CVE-2008-1439

CVE-2008-1439 is rejected; DO NOT USE THIS CANDIDATE NUMBER.

CVE-2016-1439

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

CVE-2016-1439

CVE-2016-1439 is a cross-site scripting (XSS) vulnerability in the HTTP web-based management interface of Cisco Unified Contact Center Enterprise (UCCE) up to version 10.5(2). The root cause is insufficient input validation, allowing remote attackers to inject web script/HTML via a crafted URL (B...

Oracle: Security Advisory (ELSA-2009-1106)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-1439)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-1439)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201309-09

Gentoo Linux Local Security Checks GLSA 201309-09 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Oracle Linux 6 : wpa_supplicant (ELSA-2015-1439)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2015-1439 advisory. 1:0.7.3-6 - AP WMM: Fix integer underflow in WMM Action frame parser rh 1221178 rh 1226396 1:0.7.3-5 - Add domainmatch config option from upstream rh 1186806 rh...

Fedora Update for websvn FEDORA-2015-1439

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated darktable package fixes two vulnerabilities

Updated darktable package fixes security vulnerabilities: Darktable before version 1.2.3 contains an embedded copy of LibRaw that incorrectly handled photo files. If a user was tricked into processing a specially crafted photo file, darktable could be made to crash, resulting in a denial of servi...

CVE-2014-1439

The CVE-2014-1439 entry concerns HHVM (HipHop Virtual Machine for PHP). The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp does not properly disable a certain libxml handler, enabling XML External Entity (XXE) attacks. Affected versions are HHVM before 2.4.0 and 2.3.x befo...

CVE-2014-1439

The libxmldisableentityloader function in runtime/ext/extsimplexml.cpp in HipHop Virtual Machine for PHP HHVM before 2.4.0 and 2.3.x before 2.3.3 does not properly disable a certain libxml handler, which allows remote attackers to conduct XML External Entity XXE attacks...

Fedora Update for ufraw FEDORA-2013-22832

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...