CVE-2014-1426

creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:49+00:00| seen| https://t.me/cibsecurity/3863...

CVE-2014-1427

creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:48+00:00| seen| https://t.me/cibsecurity/3862...

CVE-2014-1428

creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:47+00:00| seen| https://t.me/cibsecurity/3861...

CVE-2014-1426

A vulnerability in maasserver.api.getfilebyname of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2...

CVE-2014-1427

Ubuntu MAAS contains a Cross-Site Scripting vulnerability in its REST API. The issue affects MAAS versions prior to 1.9.2 and can allow an attacker to cause a logged-in user to execute commands via malicious input, due to insufficient validation in the web application. The root cause is tied to R...

CVE-2014-1428 uuid.uuid1() is not suitable as an unguessable identifier/token

A vulnerability in generatefilestoragekey of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2...

CVE-2014-1428

The CVE-2014-1428 entry concerns Ubuntu MAAS and the generate_filestorage_key function. Affected: MAAS versions prior to 1.9.2. Issue: vulnerability that allows an attacker to brute-force filenames due to flaws in key/identifier generation. Impact details are limited to the described statment; ex...

CVE-2014-1426

CVE-2014-1426 concerns a vulnerability in MAAS (Ubuntu MAAS) where maasserver.api.get_file_by_name can be abused by unauthenticated network clients to download arbitrary files. Affected: MAAS versions prior to 1.9.2. The underlying issue is not fully detailed in the provided documents, but the im...

Security Bulletin: Multiple vulnerabilities in WebSphere Application Server Liberty affect IBM Spectrum Protect for Workstations Central Administration Console (CVE-2014-7810, CVE-2018-8039, CVE-2018-1901)

Summary IBM WebSphere Application Server Liberty is affected by Apache Tomcat, Apache CXF, and elevation of privileges vulnerabilities which affect the IBM Spectrum Protect for Workstations formerly Tivoli Storage Manager FastBack for Workstations Central Administration Console CAC. Vulnerability...

Security fix for the ALT Linux 10 package libtiff version 4.0.10.0.57.f9fc01c3-alt1

April 9, 2019 Vladimir D. Seleznev 4.0.10.0.57.f9fc01c3-alt1 - Updated to v4.0.10-57-gf9fc01c3 ALT 36575, 34677. - Applied SUSE patches: + tiff-4.0.3-seek.patch; + tiff-4.0.3-compress-warning.patch; + tiff-CVE-2018-12900.patch. - Built with support of: + libjbig; + libwebp; + libzstd. - Fixes: +...

CVE-2014-5435

creationtimestamp| type| source ---|---|--- 2019-04-08 20:40:45+00:00| seen| https://t.me/cibsecurity/3584...

CVE-2014-5436

creationtimestamp| type| source ---|---|--- 2019-04-08 20:40:44+00:00| seen| https://t.me/cibsecurity/3583...

CVE-2014-9186

creationtimestamp| type| source ---|---|--- 2019-04-08 20:40:43+00:00| seen| https://t.me/cibsecurity/3582...

CVE-2014-5435

CVE-2014-5435 involves an arbitrary memory write vulnerability in the Honeywell Experion PKS components, specifically the dual_onsrv.exe module, affecting the R40x line before R400.6, R41x before R410.6, and R43x before R430.2. The flaw could enable remote code execution or denial of service. The...

CVE-2014-5436

CVE-2014-5436 affects Honeywell Experion PKS by a directory traversal in the confd.exe module. The vulnerability spans Honeywell EKPS/Experion PKS releases: R40x before R400.6, R41x before R410.6, and R43x before R430.2, and could lead to information disclosure. Root cause is a directory traversa...

CVE-2014-9186

CVE-2014-9186 affects Honeywell Experion PKS confd.exe modules. The vulnerability is a file inclusion flaw in confd.exe (and related modules noted in the CVE family) that could allow an arbitrary file to be accepted into a function, with potential information disclosure or remote code execution. ...

CVE-2014-3603

creationtimestamp| type| source ---|---|--- 2019-04-04 18:34:33+00:00| seen| https://t.me/cibsecurity/3542...

CVE-2014-3603

The 1 HttpResource and 2 FileBackedHttpResource implementations in Shibboleth Identity Provider IdP before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

CVE-2014-3603

CVE-2014-3603 involves improper hostname verification in Shibboleth IdP (HttpResource/FileBackedHttpResource) and OpenSAML Java 2.6.2, allowing MITM spoofing of SSL with arbitrary valid certs. IBM/Liberty-focused advisories confirm affected products and versions: Liberty for Java 3.37 and earlier...

Ubuntu: Security Advisory (USN-3929-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...