PHP 7.2.x <= 7.2.7 DoS Vulnerability

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

Security Bulletin: IBM QRadar SIEM contains vulnerable components and libraries. (CVE-2011-4314)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2011-4314 DESCRIPTION: OpenID4Java could allow a remote attacker to bypass security restrictions, caused by the improper...

Security Bulletin: IBM QRadar SIEM is missing HSTS header. (CVE-2016-9972)

Summary The product is missing the HTTP Strict Transport Security header. Users can navigate by mistake to the unencrypted version of the web application or accept invalid certificates. This leads to sensitive data being sent unencrypted over the wire. Vulnerability Details CVEID: CVE-2016-9972...

Security Bulletin: Denial of Service vulnerability in Apache Commons FileUpload affects IBM WebSphere Lombardi Edition

Summary A security vulnerability exists in the open source library Apache Commons FileUpload that is shipped with and used by IBM WebSphere Lombardi Edition. Vulnerability Details By sending a specially crafted request, an attacker might exploit this vulnerability to cause the application to ente...

CVE-2013-3023

IBM Tivoli Application Dependency Discovery Manager TADDM 7.1.2 and 7.2.0 through 7.2.1.4 might allow remote attackers to obtain sensitive information about Tomcat credentials by sniffing the network for a session in which HTTP is used. IBM X-Force ID: 84361...

CVE-2013-3023

IBM TADDM (Tivoli Application Dependency Discovery Manager) versions 7.1.2 and 7.2.0 up to 7.2.1.4 are affected by CVE-2013-3023, which could allow remote attackers to obtain Tomcat credentials by sniffing HTTP sessions. The IBM Security Bulletin confirms the vulnerability in the Tomcat interface...

PT-2017-17793

Name of the Vulnerable Software and Affected Versions instack-undercloud versions 5.3.0 through 7.2.0 Description A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. This could allow a local user to conduct a symbolic-link attack,...

CVE-2017-4988

EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system...

CVE-2017-4989

CVE-2017-4989 affects EMC Avamar Server Software releases listed (7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401). Root cause: unauthenticated remote bypass of authentication to access the system maintenance page, enabling viewing of sensitive info and execution of maintenance tas...

EMC Isilon OneFS Privilege Escalation Vulnerability

EMC Isilon OneFS is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2017-4980

EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to compromise the affected system. Affected versions are 7.1.0 - 7.1.1.10, 7.2.0 - 7.2.1.3, and 8.0.0 - 8.0.0.1...

CVE-2016-9871

EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system...

EMC Isilon OneFS Privilege Escalation Vulnerability

EMC Isilon OneFS is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

VMware vRealize Automation Partial Information Disclosure Vulnerability (VMSA-2016-0021)

There is a partial information disclosure vulnerability in VMware Identity Manager as used by vRealize Automation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

OP5 Monitor <= 7.1.9 RCE Vulnerability

OP5 Monitor is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:op5:monitor...

Atlassian JIRA < 7.2.0 XSS

Binary data 9741.prm...

Ceragon FibeAir IP-10 Authentication Bypass Vulnerability

The Ceragon FibeAir IP-10 is a wireless microwave transmission device from Ceragon Israel. An authentication bypass vulnerability exists in Ceragon FibeAir IP-10 versions prior to 7.2.0, which can be exploited by an attacker to bypass the authentication mechanism and perform unauthorized operatio...

op5 Monitor Nacoma command execution

Added: 07/01/2016 Background op5 Monitor is an open-source monitoring solution written in PHP. Problem The commandtest.php script in the Nacoma component of op5 Monitor can be used to execute arbitrary operating system commands. Resolution Upgrade to op5 Monitor 7.2.0 or higher. References...

File Replication Pro 7.2.0 - Multiple Vulnerabilities

File Replication Pro 7.2.0 - Multiple Vulnerabilities...

CVE-2015-7412

The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when the GatewayScript decryption API or a JWE decrypt action is enabled, do not require signed ciphertext data, which makes it easier for remote attackers to obtain plaintext data via a padding-oracle attac...