Security Bulletin: Cross-site scripting Vulnerability in IBM® Rational® Quality Manager

Summary IBM® Rational® Quality Manager is affected by a potential cross-site scripting vulnerability Vulnerability Details CVEID: CVE-2017-1609 DESCRIPTION: IBM Quality Manager RQM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web...

Amazon Linux 2 : golang (ALAS-2021-1609)

The version of golang installed on the remote host is prior to 1.15.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1609 advisory. In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an...

Juniper JSA10979

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the JSA10979 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version numbe...

ectnews.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1090621 Security Researcher Broly157 Helped patch 1609 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting ectnews.com website and i...

Huawei EulerOS: Security Advisory for bash (EulerOS-SA-2019-1609)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1609

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1609 Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1609

CVE-2020-1609 describes a vulnerability in Juniper JDHCPD (IPv6 in relay mode) that allows an attacker to arbitrarily execute commands as root on target devices. Affected software includes Junos OS and Junos OS Evolved versions listed in the CVE description (various 15.1, 16.x, 17.x, 18.x, and 19...

Cisco NX-OS Software CLI Command Injection Vulnerability (Cisco-Sa-20190306-Nxos-Cmdinj-1609)

According to its self-reported version, Cisco NX-OS Software is affected by following vulnerability - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.The...

CVE-2019-1609

CVE-2019-1609 describes a Cisco NX-OS CLI command-injection vulnerability. The issue arises from insufficient validation of arguments passed to certain CLI commands, allowing an authenticated, local attacker to inject commands and execute arbitrary OS commands with elevated privileges. Affected d...

CVE-2019-1609 Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

RHEL 5 / 6 : Red Hat JBoss Enterprise Application Platform (RHSA-2018:1609)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1609 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. Security Fixes:...

GLSA-201611-13 : MongoDB: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201611-13 MongoDB: Denial of Service MongoDBs mongod server fails to validate some cases of malformed BSON. Impact : A remote attacker could send a specially crafted BSON request possibly resulting in a Denial of Service condition...

CVE-2016-1609

CVE-2016-1609 describes multiple cross-site scripting (XSS) vulnerabilities in Micro Focus/Novell Filr (before 1.2 Security Update 3 and before 2.0 Security Update 2). The flaws allow remote authenticated users to inject arbitrary web script or HTML via crafted input (demonstrated by an IMG eleme...

CVE-2016-1609

Multiple cross-site scripting XSS vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of ...

Micro Focus Filr CSRF / XSS / Code Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Micro Focus former Novell Filr Appliance vulnerable version: Filr 2 =2.0.0.421, Filr 1.2 = 1.2.0.846 fixed version: Filr 2 v2.0.0.465,...

CVE-2016-1609

creationtimestamp| type| source ---|---|--- 2016-07-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40161...

MongoDB BSON Message Handling Remote DoS Vulnerability - Linux

MongoDB is prone to remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb";...

Fedora Update for mongodb FEDORA-2015-4003

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...