628 matches found
Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450 and CVE-2013-6449)
Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2013-4353 DESCRIPTION: A carefully crafted invalid TLS handshake could crash OpenSSL with a NULL pointer exception. A malicious server could use this flaw to crash a connecting client. This issue...
Security Bulletin: IBM Content Collector for Email affected by vulnerability due to WebSphere Application Server having insecure permissions when custom start up scripts are used
Summary IBM Content Collector for Email is affected by vulnerability due to WebSphere Application Server having insecure permissions when custom start up scripts are used. WAS might create files using the default permissions instead of the customized permissions, due to which a local attacker cou...
Security Bulletin: Content Collector for Email is affected by an Incorrect redirection for an OAuth authorization request in WebSphere Application Server both Traditional and Liberty
Summary Content Collector for Email has addressed the following vulnerability. IBM WebSphere Application Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Vulnerability...
Security Bulletin: OpenSource Apache Struts vulnerability in IBM Content Collector for Email
Summary Apache Struts could allow a remote attacker to bypass security restrictions, caused by an error in the MultiPageValidator implementation. An attacker could exploit this vulnerability using a modified page parameter to bypass restrictions and launch further attacks on the system...
Security Bulletin: IBM Streams is affected by Open Source Apache Xerces-C XML parser Vulnerabilities (CVE-2016-4463)
Summary IBM Streams is affected by Open Source Apache Xerces-C XML parser Vulnerabilities. IBM Streams has addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-4463 DESCRIPTION: Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by a stack-based buffer...
Apache OpenMeetings Denial of Service Vulnerability (CNVD-2018-06545)
Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A security vulnerability exists in Apac...
Design/Logic Flaw
In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software including Microsoft Excel. For example, the CSV data may contai...
About the security content of watchOS 4.0.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of watchOS 4.0.1
About the security content of watchOS 4.0.1 This document describes the security content of watchOS 4.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
Design/Logic Flaw
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
UBUNTU-CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
CVE-2013-7426
The vulnerability CVE-2013-7426 affects kamailio 4.0.1, via insecure creation of /tmp/kamailio_fifo. Several connected sources corroborate an insecure temporary-file vulnerability in /tmp/kamailio_fifo, enabling manipulation of the file path. Notably, CNVD-2017-31584 describes a remote attacker e...
Telegram 4.0.1 Two Factor Authentication Bypass
Title: =============== Telegram 4.0.1 - "TwoFactor Authentication" ByPass 0day Author: =============== Shahab Shamsi Vendor Homepage =============== https://telegram.org/ Date: =============== 2017-06-25 Exploitation-Technique: =============== Local,Remote References: =============== Video1:...
Session fixation
Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID...
Revive Adserver Multiple Vulnerabilities
Revive Adserver is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:revive:adserver"; if...
CVE-2016-6647
Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
EMC ViPR SRM Cross-Site Scripting Vulnerability
EMC ViPR SRM is a storage resource management software. A cross-site scripting vulnerability exists in EMC ViPR SRM 4.0.1. An attacker can exploit this vulnerability to execute arbitrary HTML or JavaScript code within a user's browser session...