Security Bulletin: WebSphere network security vulnerability in IBM Content Foundation on Cloud

Summary WebSphere network security vulnerability in IBM Content Foundation on Cloud containers Vulnerability Details CVEID:CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain...

Fedora 31 : wordpress (2020-15e15c35da)

WordPress 5.5.3 Maintenance Release This maintenance release fixes an issue introduced in WordPress 5.5.2 which makes it impossible to install WordPress on a brand new website that does not have a database connection configured. ---- WordPress 5.5.2 Security and Maintenance Release Security Updat...

Security Bulletin: Cross Site Scripting security vulnerabilities in FileNet Content Manager

Summary Cross Site Scripting security vulnerabilities in FileNet Content Manager in Administration Console for Content Platform Engine ACCE Vulnerability Details CVEID: CVE-2020-4447 DESCRIPTION: IBM FileNet Content Manager is vulnerable to cross-site scripting. This vulnerability allows users to...

Cross site scripting

IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1812...

CVE-2020-4447

IBM FileNet Content Manager 5.5.3 and 5.5.4 are affected by CVE-2020-4447, a cross-site scripting vulnerability in the Administration Console for Content Platform Engine (ACCE) that could allow an attacker to inject JavaScript into the Web UI and potentially disclose credentials within a trusted ...

Format string

AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution...

CVE-2020-12129

The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function...

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25588)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

AirDisk Pro app cross-site scripting vulnerability

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

Security Bulletin: IBM FileNet Content Manager and Case Foundation security vulnerability in Administration Console for Content Platform Engine (ACCE)

Summary IBM FileNet Content Manager and Case Foundation have multiple security vulnerabilities in Administration Console for Content Platform Engine ACCE. Vulnerability Details CVEID: CVE-2019-4642 DESCRIPTION: IBM FileNet Content Manager allows web pages to be stored locally which can be read by...

Linux kernel post-release reuse vulnerability (CNVD-2020-04531)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in the vcdoresize function in drivers/tty/vt/vt.c in Linux kernel 5.5.2 and...

vBulletin 5.x < 5.5.4 Patch Level 2 Multiple Vulnerabilities

vBulletin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vbulletin:vbulletin"; ifdescripti...

CVE-2019-4572

IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an administrator on the local machine. IBM X-Force ID: 166798...

CVE-2019-4572

IBM FileNet Content Manager 5.5.2 and 5.5.3 (in specific configurations) could log web service user credentials to local logs, exposing credentials to local administrators. The IBM bulletin (Security Bulletin: IBM FileNet Content Manager and Case Foundation security vulnerability in Process Orche...

DVD X Player 5.5.3 Buffer Overflow

!/usr/bin/env python Exploit Title: DVD X Player 5.5.3 Buffer Overflow Date: 20.03.2019 Exploit Author: Paolo Perego - [email protected] Vendor Homepage: http://www.dvd-x-player.com Software Link: http://www.dvd-x-player.com/download/DVDXPlayerSetup-Standard.exe Version: 5.5.3.8 and above...

Code Execution Vulnerability in Rice CMS v5.5.3

DAMI CMS is a free open source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smart phone station solutions. A code execution vulnerability exists in version V5.5.32017-04-15 of DAMI CMS, which can b...

CVE-2017-9023

The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service infinite loop via a crafted certificate...

CVE-2017-9023

The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service infinite loop via a crafted certificate...

NUUO NVRmini 2 3.0.8 - Local File Disclosure

Exploit for php platform in category web applications NUUO Local File Disclosure Vulnerability Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 NE-4160, NT-4040 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS functionality. Setup is simpl...

Fortinet FortiWeb Path Traversal Vulnerability (FG-IR-16-009)

Fortinet FortiWeb is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:fortinet:fortiweb";...