Virtuozzo Hybrid Server 7.5 Update 2 Hotfix 2 (7.5.2-464)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 2 provides stability and usability bug fixes. Vulnerability id: PSBM-136189 QEMU could mark a VM QCOW2 image as corrupt. Vulnerability id: PSBM-136198 QEMU could not be updated. Vulnerability id: PSBM-136407 VCMMD needed to be properly notified ...

Atlassian Confluence 7.5.x < 7.5.2 Cross-Site Scripting

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.2 or 7.5.x 7.5.2. It is, therefore, affected by a Cross-Site Scripting XSS vulnerability in user macro parameters. Note that the scanner has not tested for these issues b...

CVE-2020-14175

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2...

CVE-2020-14175

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2...

Security Bulletin: IBM DataPower Gateways is affected by a downgrade vulnerability (CVE-2018-1663)

Summary IBM DataPower Gateway has addressed the following vulnerability: CVE-2018-1663 Vulnerability Details CVEID: CVE-2018-1663 DESCRIPTION: IBM DataPower Gateways could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect DataPower Gateways

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM DataPower Gateways. IBM DataPower Gateways has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-2952 DESCRIPTION: An unspecified vulnerability related to the Java SE...

Security Bulletin: A Potential Information Disclosure has been identified in WebSphere Application Server shipped with Rational Asset Manager

Summary WebSphere Application Server is shipped as a component of IBM Rational Asset Manager. Information about a potential information disclosure in WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulleti...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Rational Asset Manager (CVE-2016-0377)

Summary WebSphere Application Server is shipped as a component of Rational Asset Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Rational Asset Manager (CVE-2016-0359)

Summary WebSphere Application Server is shipped as a component of Rational Asset Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: HTTP...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational Asset Manager (CVE-2014-0114)

Summary IBM WebSphere Application Server is shipped as a component of IBM Rational Asset Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details | Subscribe to My Notifications to be notified o...

Security Bulletin: Vulnerability in OpenSSL affects IBM DataPower Gateways (CVE-2017-3735)

Summary A potential vulnerability has been reported by the OpenSSL project. IBM DataPower Gateways has addressed the applicable CVE. Vulnerability Details Relevant CVE Information: CVEID: CVE-2017-3735 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a...

Hyland Saperion Web Client Information Disclosure Vulnerability

Hyland Saperion Web Client is a client software for accessing the Saperion Enterprise Content Management System from Hyland, Inc. An information disclosure vulnerability exists in Hyland Saperion Web Client version 7.5.2 83166. A remote attacker can exploit this vulnerability to read arbitrary...

Remote code execution

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6293

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

Design/Logic Flaw

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6293

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

Personify360 e-Business Information Disclosure Vulnerability (CNVD-2017-13143)

Personify360 e-Business is a Web-based member management system from Personify, Inc. A security vulnerability exists in Personify360 e-Business versions 7.5.2 through 7.6.1. The vulnerability can be exploited by an attacker to add vendor accounts or read vendor account data including: user names...

Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key

No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- Loadbalancer.org Enterprise VA 7.5.2 and below ------------------------- Affected vendors: ------------------------- Loadbalancer.or...