50 matches found
CVE-2020-4665
CVE-2020-4665 affects IBM Sterling File Gateway versions 2.2.0.0–2.2.6.5 and 6.0.0.0–6.0.3.2. Root cause: the product does not set the secure attribute on authorization tokens or session cookies, enabling cookie values to be exposed when a user clicks an http:// link or visits an attacker-control...
Security Bulletin: Cookie Vulnerability Affects IBM Sterling File Gateway (CVE-2020-4665)
Summary IBM Sterling File Gateway has addressed a cookie vulnerability. Vulnerability Details CVEID: CVE-2020-4665 DESCRIPTION: IBM Sterling File Gateway does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:...
CVE-2013-4665
creationtimestamp| type| source ---|---|--- 2019-12-27 18:40:14+00:00| seen| https://t.me/cibsecurity/8885 2024-03-17 15:21:50+00:00| seen| https://t.me/ctinow/209958...
CVE-2013-4665
SPBAS Business Automation Software 2012 has CSRF...
CVE-2013-4665
SPBAS Business Automation Software 2012 has CSRF...
CVE-2013-4665
CVE-2013-4665 affects SPBAS (SPBAS Business Automation Software) 2012 and is described as a Cross-Site Request Forgery (CSRF) vulnerability. The connected documents corroborate a CSRF issue but do not provide further technical details such as affected components, exact root cause, exploit scenari...
Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale which allows users to embed arbitrary JavaScript code in the Web UI (CVE-2019-4665)
Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale that could allow users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. A fix for this...
CVE-2019-4665
IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...
CVE-2016-4665
An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read audio-recording metadata via a crafted app...
CVE-2016-4665
An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read audio-recording metadata via a crafted app...
CVE-2016-4665
CVE-2016-4665 is an Apple vulnerability affecting the Sandbox Profiles component, allowing a crafted app to read audio-recording metadata on affected systems. The issue is listed for iOS prior to 10.1, tvOS prior to 10.0.1, and watchOS prior to 3.1. Affected products include iPhone/iPad/iPod touc...
Apple TV < 10.0.1 Multiple Vulnerabilities
Binary data 9757.prm...
Oracle: Security Advisory (ELSA-2010-0519)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Multiple (remote and local) Vulnerabilities in Xceedium Xsuite [MZ-15-02]
See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02 ---------------------------------------------------------------------...
Xceedium Xsuite Command Injection / XSS / Traversal / Escalation Vulnerabilities
Xceedium Xsuite versions 2.3.0 and 2.4.3.0 suffer from command injection, cross site scripting, directory traversal, hard-coded credential, and privilege escalation vulnerabilities. Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02...
Debian DSA-2552-1 : tiff - several vulnerabilities
Several vulnerabilities were discovered in TIFF, a library set and tools to support the Tag Image File Format TIFF, allowing denial of service and potential privilege escalation. These vulnerabilities can be exploited via a specially crafted TIFF image. - CVE-2012-2113 The tiff2pdf utility has an...
Fedora Update for openssl FEDORA-2012-4665
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : tiff vulnerabilities (USN-1416-1)
Alexander Gavrun discovered that the TIFF library incorrectly allocated space for a tile. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a denial of...
SuSE 10 Security Update : libtiff (ZYPP Patch Number 7474)
The following bugs have been fixed : - Specially crafted files could cause a heap-based buffer overflows in the JPEG, Fax and Thunder decoders. CVE-2011-0191 / CVE-2011-0192 / CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool...