CVE-2015-9496

CVE-2015-9496 affects the WordPress plugin “freshmail-newsletter” prior to version 1.6. The vulnerability is a SQL Injection in shortcode.php via the FM_form id= substring, caused by missing validation/sanitization of the shortcode attribute before including it in a SQL query. Exploitation is fea...

CVE-2015-9494

The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier...

CVE-2015-9493

The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...

CVE-2015-9495

The CVE-2015-9495 vulnerability affects the WordPress plugin syndication-links up to version 1.0.2 (before 1.0.3). The root cause is an XSS flaw via the genericons/example.html anchor identifier, enabling injection of client-side script in the browser. Impact is described as partial integrity imp...

CVE-2015-9493

The CVE-2015-9493 entries target the WordPress plugin “my-wish-list”

CVE-2015-9493

The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...

Cisco Finesse Appliance Multiple Cross-Site Scripting Vulnerabilities (Cisco-SA-20150818-CVE-2015-4310)

According to its self-reported version, the Cisco Finesse appliance is affected by multiple cross-site scripting XSS vulnerabilities exist due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to...

Cisco Finesse Appliance Cross-Site Scripting Vulnerability (Cisco-SA-20150501-CVE-2015-0714)

According to its self-reported version, the Cisco Finesse appliance is affected by a cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

CVE-2015-9483

creationtimestamp| type| source ---|---|--- 2019-10-18 08:14:06+00:00| seen| https://t.me/cibsecurity/7501...

CVE-2015-9484

creationtimestamp| type| source ---|---|--- 2019-10-18 08:14:05+00:00| seen| https://t.me/cibsecurity/7500...

Security Bulletin: A security vulnerability has been identified in IBM® GPFS shipped with IBM PureData System for Operational Analytics (CVE-2015-4974, CVE-2015-4981)

Summary IBM GPFS is shipped as a component of IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM GPFS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: IBM Spectrum Scale an...

Security Bulletin: IBM PureData System for Operational Analytics V1.0 (A1791) is affected by vulnerabilities in GSKit (CVE-2015-0138, CVE-2015-0159 and CVE-2014-6221)

Summary The IBM PureData System for Operational Analytics V1.0 A1791 ships with IBM DB2 10.1. GSKit is an IBM component that is used by IBM DB2. The GSKit that is shipped with IBM DB2 contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL...

Security Bulletin: A security vulnerability has been identified in IBM® General Parallel File System shipped with IBM PureData System for Operational Analytics (CVE-2015-1890)

Summary IBM General Parallel File System is shipped as a component of IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM General Parallel File System has been published in a security bulletin. Vulnerability Details CVEID: CVE-2015-1890...

Security Bulletin: A security vulnerability has been identified in IBM® DB2® shipped with IBM Smart Analytics System and IBM PureData System for Operational Analytics (CVE-2016-0201, CVE-2015-7420, CVE-2015-7421)

Summary IBM® DB2® is shipped as a component of IBM Smart Analytics System and IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Consult the security bulletin Security Bulleti...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM PureData System for Operational Analytics (CVE-2015-0235)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects IBM PureData System for Operational Analytics. Vulnerability Details CVEID: CVE-2015-0235 DESCRIPTION:The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By sending a...

Security Bulletin: Public disclosed vulnerability from OpenSSL and OpenSSH affects IBM Netezza Host Management

Summary Open Source OpenSSL and OpenSSH is used by IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVEs. OpenSSL and OpenSSH rpms from RedHat are included in IBM Netezza Host Management for RHEL 6. Vulnerability Details OpenSSH : CVEID: CVE-2016-6210...

Security Bulletin: IBM Netezza Host Management is vulnerable to a BIND 9 utility issue (CVE-2015-5722)

Summary A denial of service vulnerability in Red Hat Linux Bind 9 utility affects Netezza Host Management. Vulnerability Details CVEID: CVE-2015-5722 DESCRIPTION: A denial of service DOS security vulnerability in the Red Hat Linux BIND 9 utility has been discovered. This utility is installed by...

Security Bulletin: Vulnerability in BIND affects IBM Netezza Host Management (CVE-2015-5477)

Summary BIND vulnerability disclosed by Internet Systems Consortium ISC affects IBM Netezza Host Management. IBM Netezza Host Management has addressed this CVE. Vulnerability Details CVEID: CVE-2015-5477 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error in the handlin...

Security Bulletin: Vulnerabilities in OpenSource GNU Glibc affect IBM Netezza Host Management (CVE-2015-8778,CVE-2015-8779,CVE-2014-9761)

Summary OpenSource GNU Glibc is used by IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-8778 DESCRIPTION: GNU C Library glibc could allow a remote attacker to execute arbitrary code on the system, caused by an integ...

Security Bulletin: Vulnerabilities in GNU C library (glibc), OpenSSL and BIND affect IBM Netezza Host Management

Summary Vulnerabilites in GNU C library glibc, OpenSSL and BIND affects IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by...