Security Bulletin: Buffer overflow in IBM® Db2® tool db2licm (CVE-2018-1488).

Summary The Db2 tool db2licm is vulnerable to buffer overflow. Vulnerability Details CVEID: CVE-2018-1488 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on...

CVE-2017-1488

An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 128627...

CVE-2017-1488

CVE-2017-1488 is described in IBM and NVD records as an undisclosed information-disclosure vulnerability in Jazz common products. The IBM Security Bulletin (EB) ties this CVE to IBM Jazz-based products within Rational CLM/RTC/RQM/DOORS Next Gen/Engineering Lifecycle Manager/Rhapsody/Software Arch...

Solaris 10 (sparc) : 116648-25

Web Server 6.1: Sun ONE Web Server 6.1 Patch WS61SP13. Date this patch was last updated by Sun : Sep/20/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2016-1488

Summary: CVE-2016-1488 is a cross-site scripting (XSS) vulnerability in the login form of Siemens OZW672/OZW772 devices. Root cause: the web server’s login input is not properly sanitized, enabling injection of arbitrary script/HTML via a crafted URL. Impact: allows remote attackers to alter data...

SUSE: Security Advisory for Mozilla (SUSE-SU-2014:0248-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2014:0248-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-0752)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1488

CVE-2015-1488 affects Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1, via an unspecified action handler in the management console that allows remote authenticated users to read arbitrary files. The issue is addressed by upgrading SEPM to version 12.1-RU6-MP1 (per Symantec SY...

Exploit for Code Injection in Oracle Jdk

Java Pwn2Own exploit - CVE-2013-1488 ================...

Fedora Update for pigz FEDORA-2015-1488

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft IIS 4.0/5.0 Malformed Filename Request Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1193/info Requesting a known filename with the extension replaced with .htr preceeded by approximately 230 %20 which is an escaped character that represents a space from Microsoft IIS 4.0/5.0 will cause the server to...

Java Applet Driver Manager Privileged toString() Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...

openSUSE Security Update : firefox / seamonkey / thunderbird (openSUSE-SU-2014:0212-1)

Mozilla Firefox was updated to version 27. Mozilla SeaMonkey was updated to 2.24, fixing similar issues as Firefox 27. Mozilla Thunderbird was updated to 24.3.0, fixing similar issues as Firefox 27. The Firefox 27 release brings TLS 1.2 support as a major security feature. It also fixes following...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0745-1)

apply aarch64 patches on openSUSE 12.3+, EMAARCH64 is not defined in earlier releases - update to icedtea-2.3.9 bnc816720 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization -...

openSUSE Security Update : rsyslog (openSUSE-SU-2011:0326-1)

rsyslog was updated to version 5.6.5 to fix a number of memory leaks that could crash the syslog daemon CVE-2011-1488, CVE-2011-1489, CVE-2011-1490. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2014:0212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox 27 release (important)

Mozilla Firefox was updated to version 27. Mozilla Seamonkey was updated to 2.24, fixing similar issues as Firefox 27. Mozilla Thunderbird was updated to 24.3.0, fixing similar issues as Firefox 27. The Firefox 27 release brings TLS 1.2 support as a major security feature. It also fixes following...

CVE-2014-1488

CVE-2014-1488 affects Mozilla Firefox < 27.0 and SeaMonkey

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...