35968 matches found
CVE-2015-5039
IBM Rational ClearCase Remote Client and Change Management Integrations are affected by CVE-2015-5039 due to improper hostname validation of X.509 SSL certificates. Affected products/versions: Rational ClearCase 7.1.x, 8.0.x prior to 8.0.0.18, and 8.0.1.x prior to 8.0.1.11. Root cause: hostname v...
CVE-2015-9257
BMC Remedy Action Request AR System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS...
CVE-2015-9257
CVE-2015-9257 affects BMC Remedy Action Request (AR) System 9.0 prior to 9.0.00 Service Pack 2 hot fix 1. A persistent XSS vulnerability exists in Remedy AR System; impact is web UI based. To remediate, apply 9.0.00 SP2 hot fix 1 (or equivalent patched release) per linked disclosures. No exploita...
Webmin < 1.760 xmlrpc.cgi Cross Site Scripting Vulnerability
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.760. It is, therefore, affected by a cross site scripting vulnerability in xmlrpc.cgi, which could potentially lead to remote code execution in certain products. C Tenable Network Security, Inc...
Juniper Junos Space < 17.2R1 Multiple Vulnerabilities (JSA10838)
According to its self-reported version number, the remote Junos Space version is prior to 17.2R1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108520; scriptversion"1.8";...
CVE-2015-7459
IBM Connections (versions 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4) contains a Cross‑Site Scripting (XSS) vulnerability. The root cause is failure to properly validate user-submitted input, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. This is ...
CVE-2015-7458
IBM Connections is affected by a cross-site scripting (XSS) vulnerability across multiple versions (3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4). The underlying cause is input validation failure that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Pub...
CVE-2015-7460
CVE-2015-7460 describes a cross-site scripting (XSS) vulnerability in IBM Connections versions 3.0.1.1 and earlier, and 4.0, 4.5, and 5.0 before CR4. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Publicly provided connected documents confirm IBM...
CVE-2015-7449
CVE-2015-7449 affects IBM Jazz Foundation-based products (CLM, RRC, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM, and related Jazz Team Server components). The root cause is the use of weaker than expected encryption, enabling local users to obtain sensitive information. Affected versions include CL...
CVE-2015-7461
CVE-2015-7461 describes an XML external entity (XXE) vulnerability in IBM Connections versions 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 prior to CR4. The issue allows remote authenticated users to trigger a denial of service through crafted XML data, causing memory consumption. The vulnerability’s ...
CVE-2015-5350
In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read file...
openSUSE Security Update : kernel-firmware (openSUSE-2018-262)
This update for kernel-firmware fixes the following issues : - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix a ethernet flow control vulnerability in SRIOV devices bsc1077355 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Networ...
CVE-2015-7463
IBM Business Process Manager versions 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 up to cumulative fix 2 suffer an authorization flaw that allows remote authenticated users to delete process and task data by bypassing proper authorization checks. Root cause: insufficient authorization for delete oper...
CVE-2015-7440
CVE-2015-7440 affects IBM Jazz-based CLM/RQM/RTC/etc. A local privilege-escalation vulnerability exists across multiple CLM family products (CLM 3.0.1.x up to 6.x; RQM, RTC, RRC, RDNG, RELM, Rhapsody DM, RSA DM) that could allow a local user to gain privileges via unspecified vectors. Connected I...
CVE-2015-7471
CVE-2015-7471 is an XSS vulnerability affecting IBM Jazz-based CLM products (and associated RQM, RTC, RRC, RDNG, RELM, Rhapsody DM, RSA DM, and Jazz Team Server components) across multiple versions (CLM 3.0.1–6.0.1, RQM 3.0.x–3.0.1.6, RTC 3.0.x–6.0.x, RRC 3.0.x–4.0.x, RDNG 4.0.x–6.0.x, RELM 4.0.3...
CVE-2015-7453
CVE-2015-7453 : IBM Jazz/CLM family (including CLM, RQM, RTC, RRC, RDNG, RELM, Rhapsody DM, RSA DM) are vulnerable to cross-site scripting via remote crafted URLs. Affects CLM products 3.0.1–6.0.1, RQM 3.0.x–6.0.1, RTC 3.0.x–6.0.1, RRC 3.0.x–4.0.x, RDNG 4.0–6.0.1, RELM 4.0.x–6.0.1, Rhapsody DM 4....
CVE-2015-2387
creationtimestamp| type| source ---|---|--- 2018-03-14 21:04:26+00:00| seen| MISP/5aa98d8a-3cac-42f0-b224-45d09f590eb0 2020-10-09 14:48:27+00:00| seen| MISP/f299f6e0-f80f-4c16-9812-b49640ed46c1 2020-10-09 17:20:22+00:00| seen| MISP/86dc4eac-b270-4870-b4e6-d873d9381d9f 2023-06-14 21:10:03+00:00|...
SUSE-SU-2018:0674-1 Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix a ethernet flow control vulnerability in SRIOV devices bsc1077355...
Code injection
curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did not reflect the fact that the HAVEGSSAPI define was meanwhile substituted by USEHTTPNEGOTIATE. This issue was introduced in RHEL 6.7 and affects RHEL 6 curl...