1232 matches found
Cross-Site Scripting in mrk.js
Versions of mrk.js before 2.0.1 are vulnerable to cross-site scripting XSS when markdown is converted to HTML. Recommendation Update to version 2.0.1 or later and use mark.sanitizeURL for any src and href attributes when extending the markdown...
IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2020-49352)
IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.1. The vulnerability can be exploited by a...
IBM Security Guardium Insights Improper Privilege Vulnerability
IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An Improper Privilege vulnerability exists in IBM Security Guardium Insights 2.0.1, which stems from the product performing...
firefox security update
78.2.0-2.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.2.0-2 - Update to 78.2.0 build1...
CVE-2020-4175
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force...
CVE-2020-4171
IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174407...
CVE-2020-4603
CVE-2020-4603 affects IBM Security Guardium Insights 2.0.1, where an operation is performed at a privilege level higher than the minimum required, potentially amplifying other weaknesses (IBM X-Force ID 184880). The IBM bulletin for Guardium Insights lists this among multiple vulnerabilities and ...
CVE-2020-4169
CVE-2020-4169 affects IBM Security Guardium Insights 2.0.1, where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Root cause: insufficient cryptographic protection as described in IBM X-Force entry; impact is confidentiality loss. Rem...
CVE-2020-4171
IBM Security Guardium Insights 2.0.1 contains a local storage Information Disclosure vulnerability where web pages can be stored locally and read by other users on the same system. This is described in CVE-2020-4171 and is supported by vendor references (IBM Security Guardium Insights 2.0.1). Imp...
CVE-2020-4174
IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174683...
CVE-2020-4174
IBM Security Guardium Insights 2.0.1 is affected by CVE-2020-4174, where weaker than expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. The NVD entry and IBM bulletin confirm the affected product/version and that the issue involves cryptographic wea...
CVE-2019-18847
Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1...
Enterprise Application Access Client (EAA) Vulnerability (CVE-2019-18847)
On October 15, 2019, Tesla discovered, and responsibly disclosed, a vulnerability within Akamai's Enterprise Application Access EAA client that allows privilege escalation and remote code execution RCE when an attacker is within privileged locations on a network. This vulnerability has been...
IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2020-50793)
IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.1, which can be exploited by a local user t...
Open redirect
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...
CVE-2020-4598
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...
CVE-2020-4598
CVE-2020-4598 affects IBM Security Guardium Insights 2.0.1. The vulnerability is an open redirect that could be exploited by a remote attacker to spoof the displayed URL and redirect victims to a malicious site, enabling phishing and potentially exposing sensitive information. Root cause: open re...
CVE-2020-4165
IBM Security Guardium Insights 2.0.1 is affected by CVE-2020-4165 (clickjacking). A remote attacker could lure a user to a malicious site and hijack the victim’s clicking actions, potentially enabling further attacks. IBM’s bulletin indicates that Guardium Insights has addressed this vulnerabilit...