CVE-2019-1917

Cisco Vision Dynamic Signage Director contains a REST API authentication bypass. A remote, unauthenticated attacker can craft HTTP requests to the REST API, due to insufficient validation, to bypass authentication and perform arbitrary actions with administrative privileges. The REST API is enabl...

Security Bulletin: IBM InfoSphere Information Server is affected by an Information Disclosure vulnerability

Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2018-1917 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticated user to access jsp files and disclose sensitive information. CVSS Base Score:...

CVE-2018-1917

IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 are affected by CVE-2018-1917, an information-disclosure flaw that could allow an authenticated user to access JSP files and disclose sensitive information. IBM’s security bulletin provides remediation by upgrading to 11.7.1.0 (and r...

CVE-2017-1917

...

CVE-2017-1917

CVE-2017-1917 is rejected/not used per the Initial Description; it does not represent an active vulnerability.

BlackBerry Enterprise Service (BES) Management Console 12.x < 12.4.1 Multiple XSS

According to its self-reported version, the BlackBerry Enterprise Service BES management console running on the remote host is prior to 12.4.1. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of crafted admin...

CVE-2016-1917

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918...

Cross site scripting

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917...

CVE-2016-1917

CVE-2016-1917 (BES Management Console XSS) : The vulnerability affects BlackBerry Enterprise Server (BES) 12.x, specifically the Management Console, prior to version 12.4.1. It is an XSS flaw caused by improper validation, allowing a remote attacker to inject arbitrary web script or HTML via a cr...

CVE-2016-1917

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918...

CentOS Update for libwmf CESA-2015:1917 centos7

Check the version of libwmf SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882298";...

Oracle: Security Advisory (ELSA-2010-0919)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1917

Cross-site scripting XSS vulnerability in the Active Content Filtering component in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to inject arbitrary web script or...

CVE-2015-1917

CVE-2015-1917 is an XSS vulnerability in IBM Active Content Filtering (ACF) affecting IBM WebSphere Portal and related Curam/Care Management deployments. The Root Cause is improper validation of user-supplied input in the Active Content Filtering component, allowing remote attackers to inject scr...

OracleVM 3.2 : xen (OVMSA-2015-0068) (POODLE) (Venom)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0068 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

SUSE SLES10 Security Update : Xen (SUSE-SU-2014:0411-1)

The SUSE Linux Enterprise Server 10 Service Pack 4 LTSS Xen hypervisor and toolset have been updated to fix various security issues. The following security issues have been addressed : - XSA-82: CVE-2013-6885: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the...

SUSE SLES10 Security Update : Xen (SUSE-SU-2014:0470-1)

The SUSE Linux Enterprise 10 Service Pack 3 LTSS Xen hypervisor and toolset have been updated to fix various security issues : The following security issues have been addressed : XSA-20: CVE-2012-4535: Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cau...

F5 Networks BIG-IP : GNU C Library vulnerability (SOL15885)

The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a 'stack extension attack,' a related issue to...

OracleVM 2.2 : xen (OVMSA-2013-0033)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix error in first version of the XSA-44 patch Chuck Anderson orabug 16632878, 16694867 CVE-2013-1917 - clear EFLAGS.NT in SYSENTER entry path Andrew Cooper orabug 16632878 CVE-2013-1917 - fix various...

OracleVM 3.2 : xen (OVMSA-2013-0031)

The remote OracleVM system is missing necessary patches to address critical security updates : - defer event channel bucket pointer store until after XSM checks Otherwise a dangling pointer can be left, which would cause subsequent memory corruption as soon as the space got re-allocated for some...