167 matches found
Security Bulletin: IBM FileNet Content Manager and Case Foundation security vulnerability in Administration Console for Content Platform Engine (ACCE)
Summary IBM FileNet Content Manager and Case Foundation have multiple security vulnerabilities in Administration Console for Content Platform Engine ACCE. Vulnerability Details CVEID: CVE-2019-4642 DESCRIPTION: IBM FileNet Content Manager allows web pages to be stored locally which can be read by...
CVE-2020-8647
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vcdoresize function in drivers/tty/vt/vt.c...
vBulletin 5.x < 5.5.4 Patch Level 2 Multiple Vulnerabilities
vBulletin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vbulletin:vbulletin"; ifdescripti...
CVE-2019-4572
IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an administrator on the local machine. IBM X-Force ID: 166798...
CVE-2019-4572
IBM FileNet Content Manager 5.5.2 and 5.5.3 (in specific configurations) could log web service user credentials to local logs, exposing credentials to local administrators. The IBM bulletin (Security Bulletin: IBM FileNet Content Manager and Case Foundation security vulnerability in Process Orche...
Buffer overflow
In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...
CVE-2018-15728
Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the...
CVE-2017-11508
SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a...
Xxe
CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in...
Cisco DPQ3925 devices with EDVA cross-site request forgery vulnerability
The Cisco DPQ3925 devices is a wireless router device from Cisco USA. A cross-site request forgery vulnerability exists in Cisco DPQ3925 devices with EDVA 5.5.2. It allows remote attackers to hijack the authentication of arbitrary user identities...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943...
CVE-2015-6378
Cross-site request forgery CSRF vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943...
CVE-2015-6378
The CVE-2015-6378 entry corresponds to a CSRF vulnerability in Cisco DPQ3925 devices with EDVA 5.5.2. The root cause is insufficient CSRF protections in the device web interface, enabling a remote attacker to hijack the authentication of arbitrary users by enticing them to visit a malicious link,...
[SECURITY] Fedora 19 Update: GraphicsMagick-1.3.20-3.fc19
GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...
Atlassian Confluence < 5.5.2 XWork Library ClassLoader Manipulation Remote Code Execution
According to its self-reported version number, the instance of Atlassian Confluence on the remote host is a version prior to 5.5.2. It is, therefore, affected by a flaw in the XWork library that allows a remote, unauthenticated user to alter the ClassLoader. This could allow an attacker to execut...
F5 Networks FirePass 4100 SSL VPN 'installControl.php3' - Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28902/info F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
PHP < 5.4.18, 5.5.x < 5.5.2 SSL Certificate Validation Security Bypass Vulnerability - Windows
PHP is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
CVE-2011-1427
Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Language parameter to Pages/login.aspx, 2 HeaderWarning parameter to Troubleshooting/DiagnosticReport.asp, or 3 User-Agent header to...
Kodak InSite Login Page Cross-Site Scripting
Class Input Validation Error CVE Remote Yes Local No Published Feb 14 2011 08:55AM Credit Dionach Vulnerable Kodak InSite 5.5.2 Kodak InSite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execut...