Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime IBM affect IBM Decision Optimization Center (CVE-2016-5554, CVE-2016-5556, CVE-2016-5568)

Summary There are multiple vulnerabilities in IBM® SDK Java™ and IBM® Runtime Environment Java™ Versions 6 and 7 used by IBM Decision Optimization Center. These issues were disclosed as part of the IBM Java SDK updates in October 2016. Vulnerability Details If you run your own Java code using the...

Security Bulletin: : Multiple vulnerabilities in IBM Java SDK affect Identity Insight 8.0 and 8.1 (CVE-2014-4263) and (CVE-2014-4244)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6.0 that is used by IBM WebSphere Application Server embedded in IBM InfoSphere Identity Insight. These issues were disclosed as part of the IBM Java SDK updates in July 2014. Vulnerability Details CVEID:...

sterylab.it XSS vulnerability

Open Bug Bounty ID: OBB-633029 Description| Value ---|--- Affected Website:| sterylab.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-11235

creationtimestamp| type| source ---|---|--- 2018-05-30 11:57:16+00:00| seen| https://t.me/canyoupwnme/3871 2018-06-03 21:49:14+00:00| published-proof-of-concept| https://t.me/canyoupwnme/3895 2018-06-04 03:59:31+00:00| published-proof-of-concept| https://t.me/cKure/34 2018-06-04 14:54:23+00:00|...

CVE-2009-20007

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/talkativeresponse.rb 2025-09-16 18:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxvzwyqae2j 2025-10-23...

[SECURITY] Fedora 27 Update: procps-ng-3.3.10-16.fc27

The procps package contains a set of system utilities that provide system information. Procps includes ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch and pwdx. The ps command displays a snapshot of running processes. The top command provides a repetitive update of the...

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

Solaris 10 (sparc) : 125358-27

NSSNSPRJSS 3.35 Solaris: NSPR 4.18 / NSS 3.35 / JSS 4.3.2 Mainte. Date this patch was last updated by Sun : May/16/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid109883;...

CVE-2018-4850

creationtimestamp| type| source ---|---|--- 2018-05-16 10:59:55+00:00| seen| https://t.me/SecLabNews/2201...

Rockwell Scada System 27.011 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Rockwell Scada System - Cross-Site Scripting Exploit Author: t4rkd3vilz Vendor Homepage: https://rockwellautomation.com/ Software Link: http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=4 Version:...

RHEL 6 : flash-plugin (RHSA-2018:1367)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1367 advisory. - flash-plugin: Arbitrary Code Execution vulnerability APSB18-16 CVE-2018-4944 Note that Nessus has not tested for this issue but has instead relied...

Adobe Flash Player Security Updates (APSB18-16) - Linux

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Within Google Chrome Security Update (APSB18-16) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...

Adobe Flash Player for Mac <= 29.0.0.140 (APSB18-16)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 29.0.0.140. It is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid109602; scriptversion"1.6";...

claws-mail.org XSS vulnerability

Open Bug Bounty ID: OBB-606806 Description| Value ---|--- Affected Website:| claws-mail.org Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial Of Service (DoS) Through Out-of-Memory (OOM)

libid3tag.so is vulnerable to denial of service DoS through out-of-memory OOM issues. The vulnerability exists in id3utf16deserialize of utf16.c when parsing ID3v2 tags encoded in UTF-16 that contains an odd number of bytes, which causes an infinite loop of allocating memory...

Cross site scripting

RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in isXss function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of XSS strings26 detailed in the GitHub issue ...

CVE-2018-1000160

RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in isXss function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of XSS strings26 detailed in the GitHub issue ...

CVE-2018-1000160

RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in isXss function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of XSS strings26 detailed in the GitHub issue ...

CVE-2018-1000160

RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in isXss function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of XSS strings26 detailed in the GitHub issue ...