Security Bulletin: Vulnerabilities in GNU C library (glibc), OpenSSL and BIND affect IBM Netezza Host Management

Summary Vulnerabilites in GNU C library glibc, OpenSSL and BIND affects IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Netezza Host Management (CVE-2015-0235)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects IBM Netezza Host Management. Vulnerability Details CVEID: CVE-2015-0235 DESCRIPTION:The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By sending a specially crafted, but...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Netezza Platform Software (CVE-2015-2808)

Summary The RC4 Bar Mitzvah Attack for SSL/TLS affects IBM Netezza Platform Software. Vulnerability Details CVEID:CVE-2015-2808 DESCRIPTION:The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit thi...

Security Bulletin: Multiple Vulnerabilities in NTP and OpenSSL affect IBM Netezza Firmware Diagnostics Tools

Summary NTP and OpenSSL is used by IBM Netezza Firmware Diagnostics Tools. OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. IBM Netezza Firmware Diagnostics Tools has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-8138 DESCRIPTION: NTP could allo...

Cisco Unity Connection Cross-Site Request Forgery Vulnerability

Cross-site request forgery CSRF vulnerability in Cisco Unity Connection 11.50.98 allows remote attackers to hijack the authentication of arbitrary users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid130013; scriptversion"1.3"; scriptcvsdate"Date: 2019/10/31...

CVE-2015-9481

creationtimestamp| type| source ---|---|--- 2019-10-17 22:29:42+00:00| seen| https://t.me/cibsecurity/7496...

CVE-2019-8223

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-8220

Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-8172

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2015-9482

creationtimestamp| type| source ---|---|--- 2019-10-17 20:29:16+00:00| seen| https://t.me/cibsecurity/7490...

WordPress ThemeMakers Goodnex Premium Responsive theme Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Goodnex Premium Responsive theme is a responsive website theme plugin used in it. A security vulnerability exist...

WordPress ThemeMakers SmartIT Premium Responsive theme Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ThemeMakers SmartIT Premium Responsive theme is a responsive website theme plugin used in it. A security vulnerability exists in...

Design/Logic Flaw

The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9492

CVE-2015-9492 affects ThemeMakers SmartIT Premium Responsive theme for WordPress (up to 2015-05-15). The vulnerability allows remote attackers to disclose sensitive user data (user_login, user_pass, user_email) by requesting the file wp-content/uploads/tmm_db_migrate/wp_users.dat. The root cause ...

CVE-2015-9491

The CVE-2015-9491 entry concerns ThemeMakers Blessing Premium Responsive theme for WordPress (

CVE-2015-9490

The CVE-2015-9490 entry affects ThemeMakers GamesTheme Premium theme for WordPress (through 2015-05-15). A direct request to wp-content/uploads/tmm_db_migrate/wp_users.dat can leak sensitive user data (user_login, user_pass, user_email). Root cause is an information disclosure via a publicly acce...

CVE-2015-9489

The CVE-2015-9489 entry concerns ThemeMakers Goodnex Premium Responsive theme for WordPress (through 2015-05-15). The connected documents specify that the vulnerability allows remote attackers to obtain sensitive information (user_login, user_pass, user_email) by directly requesting the file wp-c...

CVE-2015-9488

CVE-2015-9488 involves the WordPress ThemeMakers Almera Responsive Portfolio Site Template (through 2015-05-15). The vulnerability enables information disclosure by allowing remote attackers to access sensitive user data (user_login, user_pass, user_email) via a direct request to the file path wp...

CVE-2015-9487

The CVE-2015-9487 issue affects the ThemeMakers Almera Responsive Portfolio theme for WordPress (up to 2015-05-15). A direct request to wp-content/uploads/tmm_db_migrate/wp_users.dat allows remote attackers to obtain sensitive data (user_login, user_pass, user_email). Root cause is information di...

CVE-2015-9486

The CVE-2015-9486 entry concerns the ThemeMakers Axioma Premium Responsive WordPress theme (pre-2015-05-15). Affected component: the theme itself; vulnerability stems from the ability to directly request the file wp-content/uploads/tmm_db_migrate/wp_users.dat, which exposes sensitive user data (u...