CVE-2013-0570

CVE-2013-0570 involves IBM System Networking and Blade Network Technology (BNT) switches with Fibre Channel over Ethernet (FCoE). The vulnerability causes floods of FCoE frames with unknown MAC addresses to all ports on the same VLAN, potentially exposing confidential data to eavesdroppers on the...

VulnCheck KEV: CVE-2013-0230

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method...

in2013dollars.com XSS vulnerability

Open Bug Bounty ID: OBB-645687 Description| Value ---|--- Affected Website:| in2013dollars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Lync and Skype for Business Security Bypass Vulnerability

Microsoft Lync 2013 SP1 and Skype for Business 2016 are both products of Microsoft Corporation.Microsoft Lync formerly known as Microsoft Office Communicator 2013 SP1 is a new generation of integrated communication platform for the enterprise. Skype for Business 2016 is a set of integrated...

CVE-2013-0592

IBM iNotes contains a Cross-Site Scripting (XSS) vulnerability in versions before 8.5.3 Fix Pack 6 and 9.x before 9.0.1. The flaw allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Affected component is the iNotes web interface; root cause details are not provided...

CVE-2013-0594

The affected software is IBM iNotes (formerly IBM Lotus iNotes). Affected versions are IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1. The vulnerability is an open redirect that allows remote attackers to redirect users to arbitrary websites and potentially conduct phishing. The exact ro...

CVE-2013-0589

IBM iNotes (also IBM Lotus iNotes) before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 is vulnerable to a remote information-disclosure via a crafted e-mail message that can bypass the remote image filtering mechanism. Exploitation would allow an attacker to obtain sensitive information from affected us...

CVE-2013-2951

CVE-2013-2951 affects IBM WebSphere Portal 7.0.0.x and 8.0.0.x. When tracing is enabled for the Selfcare Portlet (Profile Management), the process writes passwords to a trace file, allowing local users to read sensitive information. Root cause: tracing writes credentials to a file; impact is info...

CVE-2013-2972

Summary (CVE-2013-2972): IBM WebSphere Cast Iron 6.3 (Virtual and Physical appliances) has a vulnerability that could allow remote attackers to bypass intended access restrictions via unspecified vectors. The issue is documented in IBM’s security bulletin for Cast Iron, which cites a CVSS v2 base...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2018-13361)

Microsoft SharePoint Enterprise Server 2016 and SharePoint Foundation 2013 SP1 are both products of Microsoft Corporation USA.Microsoft SharePoint Enterprise Server 2016 is Microsoft SharePoint Enterprise Server 2016 is an enterprise business collaboration platform. The platform is used to...

Microsoft Access Remote Code Execution Vulnerability (KB4018351)

This host is missing an important security update according to Microsoft KB4018351. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Word 2013 Service Pack 1 Tampering Vulnerability (KB4022224)

This host is missing an important security update according to Microsoft KB4022224 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security Update for Microsoft Access 2013 (KB4018351) 64-Bit Edition

A security vulnerability exists in Microsoft Access 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Access 2013 (KB4018351) 32-Bit Edition

A security vulnerability exists in Microsoft Access 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Word 2013 (KB4022224) 64-Bit Edition

A security vulnerability exists in Microsoft Word 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Word 2013 (KB4022224) 32-Bit Edition

A security vulnerability exists in Microsoft Word 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Bulletin: Vulnerabilities in ClearCase GSKit Component (CVE-2013-6747)

Summary A certificate chain presented by a Client or Server could contain a circular reference that will cause the chain building logic to loop which can lead to a program crash or hang due to memory exhaustion. Vulnerability Details | Subscribe to My Notifications to be notified of important...

Security Bulletin: Vulnerability in IBM Rational ClearCase remote client with potential for privilege escalation (CVE-2013-5373)

Summary A privilege escalation vulnerability exists in the IBM Rational ClearCase remote client command line script. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your I...

Security Bulletin: IBM Rational ClearCase CCRC WAN Server remote denial of service (CVE-2013-6329)

Summary A vulnerability in relation to SSL/TLS Handshake Processing has been discovered related to the SSLV3 Session Resumption when using SSLV2. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more informati...

Security Bulletin: Rational ClearCase and ClearQuest Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Summary Java API Documentation contains a frame injection vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVEID: CVE-2013-1571...