Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Rational Software Architect for WebSphere Software (CVE-2015-4000, CVE-2015-1793)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project and affect Rational Software Architect for WebSphere Software. This includes the Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. This also includes the alternate chains...

Security Bulletin: Vulnerability in IBM InfoSphere Data Architect Cross-Site Scripting affects Rational Software Architect, Rational Software Architect for WebSphere Software and Rational Software Architect RealTime (CVE-2015-7439)

Summary An IDA cross-site scripting vulnerability to an XSS attack in a web server was addressed by Rational Software Architect, Rational Software Architect for WebSphere Software and Rational Software Architect RealTime. Vulnerability Details CVEID: CVE-2015-7439 DESCRIPTION: IBM InfoSphere Data...

Security Bulletin: Vulnerability in Apache Commons affects Rational Software Architect, Rational Software Architect for WebSphere Software and Rational Software Architect RealTime (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by Rational Software Architect, Rational Software Architect for WebSphere Software and Rational Software Architect RealTime. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects Rational Software Architect, Software Architect for WebSphere Software & Rational Software Architect RealTime (CVE-2015-2613, CVE-2015-2601, CVE-2015-2625, CVE-2015-1931, CVE-2015-4872)

Summary There are multiple vulnerabilities in IBM® SDKs Java™ Technology Edition, Versions 7 and 8 that is used by IBM Rational Software Architect, IBM Rational Software Architect for WebSphere Software and IBM Rational Software Architect RealTime. These issues were disclosed as part of the IBM...

Security Bulletin: Vulnerability in RC4 stream cipher affects Rational Software Architect for WebSphere Software (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects Rational Software Architect for WebSphere Software. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An...

CVE-2015-8370 affecting package grub2 2.02-26

CVE-2015-8370 affecting package grub2 2.02-26. A patched version of the package is available...

CVE-2015-7696 affecting package unzip 6.0-19

CVE-2015-7696 affecting package unzip 6.0-19. A patched version of the package is available...

CVE-2015-7697 affecting package unzip 6.0-19

CVE-2015-7697 affecting package unzip 6.0-19. A patched version of the package is available...

CVE-2015-4645 affecting package squashfs-tools 4.3-26

CVE-2015-4645 affecting package squashfs-tools 4.3-26. A patched version of the package is available...

CVE-2015-8863 affecting package jq 1.5-6

CVE-2015-8863 affecting package jq 1.5-6. A patched version of the package is available...

EulerOS Virtualization for ARM 64 3.0.2.0 : cpio (EulerOS-SA-2020-1962)

According to the version of the cpio package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attac...

Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2020-1962)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2015.jangsufestival.com Cross Site Scripting vulnerability OBB-1312429

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

2015.jangsufestival.com Cross Site Scripting vulnerability OBB-1302363

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Western Digital My Cloud Multiple Products < 2.21.111 Multiple Vulnerabilities

Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10er10 (0.23.0), 7th-setin (1.0.2) +404 more potentially affected by CVE-2015-7982 via gm (>=1.0.5, <=1.20.0)

gm NPM version =1.0.5, =0.0.13, =0.0.1, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =0.3.4, =0.5.0, =0.3.1, =0.0.1, =1.3.0, =3.9.1-patch1, =3.11.2-patch1 and more Source cves: CVE-2015-7982 Source advisory: OSV:GHSA-PJH3-JV7W-9JPR...

CVE-2015-9239

creationtimestamp| type| source ---|---|--- 2020-09-01 15:17:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c2v2-7rcg-2ch7...

@akryum/hotel (>=0.8.8, <=0.8.12), @bdefore/nivo-patterned-radial-arc (0.79.1) +19 more potentially affected by CVE-2015-9239 via ansi2html (0.0.1)

ansi2html NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansi2html and may be impacted: - @akryum/hotel =0.8.8, =0.8.7, =2.0.4, =10.3.3, =1.1.0, =1.4.1, =0.9.0-0, =9.12.5, =9.12.9 and more Source cves: CVE-2015-9239 Source advisory:...

1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +1308 more potentially affected by CVE-2015-1164 via serve-static (>=1.0.1, <=1.7.1)

serve-static NPM version =1.0.1, =1.0.1, =0.2.0, =1.0.37, =7.0.0, =0.0.2, =1.0.0, =0.0.1, =0.13.7, =0.0.5-SNAPSHOT.11, =3.14.2 and more Source cves: CVE-2015-1164 Source advisory: OSV:GHSA-C3X7-GJMX-R2FF...

CVE-2015-1164

creationtimestamp| type| source ---|---|--- 2020-08-31 22:57:02+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c3x7-gjmx-r2ff...