CVE-2020-1931

Apache SpamAssassin prior to 3.4.3 contains a command-injection vulnerability where specially crafted configuration files (.cf) can cause execution of system commands. The issue is explicitly tied to CVE-2020-1931 and is part of a family of remote-impact flaws affecting the SpamAssassin workflow,...

CVE-2020-1931

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration .cf files can be configured to run system commands similar to CVE-2018-11805. This issue is less stealthy and attempts to exploit the issue will throw warnings. Thanks to Damian...

CVE-2015-1931

CVE-2015-1931 affects IBM Java Security Components in IBM SDK, Java Technology Edition across multiple IBM Java releases. The issue arises from storing plaintext data in memory dumps, enabling local users to read sensitive information from memory dumps. Related IBM advisories (e.g., IBM Security ...

Security Bulletin: Multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 that is used by IBM Tivoli Netcool Configuration Manager (ITNCM).

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 Service Refresh 16 Fix Pack 4 and subsequent releases, as used by ITNCM. These issues were disclosed as part of the IBM Java SDK updates in July 2015. This bulletin also addresses the Logjam...

CVE-2013-1931

A cross-site scripting XSS vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version...

CVE-2013-1931

The CVE-2013-1931 entry describes a cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 that allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version. The connected documents confirm the affected product/version and the XSS nature but do ...

Debian DLA-1931-2 : libgcrypt20 regression update

It was discovered that the fix to address an ECDSA timing attack in the libgcrypt20 cryptographic library was incomplete. For Debian 8 'Jessie', this issue has been fixed in libgcrypt20 version 1.6.3-2+deb8u8. Thanks to Albert Chin-A-Young for the report. We recommend that you upgrade your...

Debian: Security Advisory (DLA-1931-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Firepower Management Center 6.2.3.x < 6.2.3.14 / 6.3.0.x < 6.3.0.4 / 6.4.0.x < 6.4.0.2 XSS (cisco-sa-20190703-fmc-xss)

According to its self-reported version, Cisco Firepower Management Center is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information C Tenable Network Security, Inc. include'compat.inc'; if description scriptid127121;...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2019-1931

creationtimestamp| type| source ---|---|--- 2019-07-06 05:00:03+00:00| seen| https://t.me/cveNotify/280...

CVE-2019-1931

Cisco Firepower Management Center (FMC) RSS dashboard suffers cross-site scripting (XSS) due to insufficient input validation in the web-based management interface. The flaws allow an unauthenticated, remote attacker to lure a user into clicking a crafted link, enabling arbitrary script execution...

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...

Security Bulletin: A security vulnerability has been identified in IBM Java shipped with VMware VI agent (CVE-2015-0488, CVE-2015-0204, CVE-2015-2808, CVE-2013-0443, CVE-2015-2625 and CVE-2015-1931)

Summary IBM Java is shipped as a component of VMware VI agent. Information about a security vulnerability affecting IBM Java has been published in a security bulletin. Note: Please see technote for upgrading Java runtime for VMware VI agent at...

Security Bulletin: Security vulnerability has been identified in IBM Tivoli Monitoring for Virtual Environments Agent for Linux Kernel-based Virtual Machines as it is dependent on ITM shipped Java

Summary IBM Java is shipped as an ITM shared component of IBM Tivoli Monitoring for Virtual Environments Agent for Linux Kernel-based Virtual Machines. Information about a security vulnerability affecting Linux Kernel-based Virtual Machines agent has been published in a security bulletin...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Monitoring VMWare VI Agent (CVE-2015-2625, CVE-2015-1931, CVE-2015-7575)

Summary There are several vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped as part of the IBM Tivoli Monitoring ITM VMWare VI Agent. Vulnerability Details CVEID: CVE-2015-2625 DESCRIPTION: An unspecified vulnerability related to the JSSE component could allow a remote attacker...

Security Bulletin: A security vulnerability has been identified in an IBM Tivoli Monitoring shared component shipped with Agent for Linux Kernel-based Virtual Machines (CVE-2015-2625, CVE-2015-1931, CVE-2015-7575, CVE-2015-4000)

Summary An IBM Tivoli Monitoring shared component is included as part of Agent for Linux Kernel-based Virtual Machines. Information about a security vulnerability affecting an IBM Tivoli Monitoring shared component has been published in a security bulletin. Vulnerability Details CVEID:...

Security Bulletin: A security vulnerability has been identified in an IBM Tivoli Monitoring shared component shipped with Agent for NetApp Storage(CVE-2015-2625, CVE-2015-1931, CVE-2015-7575, CVE-2015-4000)

Summary An IBM Tivoli Monitoring shared component is included as part of Agent for NetApp Storage. Information about a security vulnerability affecting an IBM Tivoli Monitoring shared component has been published in a security bulletin. Vulnerability Details CVEID: CVE-2015-2625 DESCRIPTION: An...