1014 matches found
Integer overflow
An integer overflow CWE-190 potentially causing an out-of-bounds read CWE-125 vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service...
CVE-2017-9281
An integer overflow CWE-190 potentially causing an out-of-bounds read CWE-125 vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service...
CVE-2017-9281
An integer overflow CWE-190 potentially causing an out-of-bounds read CWE-125 vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service...
CVE-2017-9282
CVE-2017-9282 affects Micro Focus VisiBroker 8.5 (VisiBroker C/C++) where an integer overflow (CWE-190) leads to a heap-allocated out-of-bounds write (CWE-787) and consequent heap corruption. The CVE entry cites a high/severe impact (NVD CVSS v3: 9.8, Critical) with network attack vector and no u...
CVE-2017-9283
CVE-2017-9283 affects Micro Focus VisiBroker 8.5. The vulnerability is an out-of-bounds read (CWE-125) in VisiBroker 8.5. The connected sources indicate related memory‑corruption vulnerabilities in 8.5 SP2/8.5 SP4 HF3 lines, but do not provide exploit details. In SEC Consult/SEC reports, a fixed ...
CVE-2017-9282
An integer overflow CWE-190 led to an out-of-bounds write CWE-787 on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...
CVE-2017-1130
IBM Notes (versions 8.5 and 9.0) is vulnerable to a denial-of-service vulnerability described in CVE-2017-1130. The issue arises when a user is duped into clicking a malicious link, which triggers a flood of file-dialog boxes and can cause the Notes client to hang and require restart. Connected s...
CVE-2017-1129
CVE-2017-1129 describes a denial-of-service in IBM Notes 8.5 and 9.0, triggered by persuading a user to click a malicious link. The vulnerability affects the native browser component bundled with IBM Lotus Notes and can cause the Notes client to hang and require a restart. Public PoCs and exploit...
CVE-2017-1501
CVE-2017-1501 affects IBM WebSphere Application Server; the Admin Console could leave web services security bindings weaker after updates. IBM bulletins indicate affected WAS versions include 8.0, 8.5, and 9.0 lines (e.g., 9.0.0.0–9.0.0.4; 8.5.5.10/11; 8.0.0.13). The vulnerability score via CVSSv...
IBM WebSphere Application Server 7.0 < 7.0.0.45 / 8.0 < 8.0.0.14 / 8.5 < 8.5.5.13 / 9.0 < 9.0.0.5 Information Disclosure (PI82630)
The version of IBM WebSphere Application Server running on the remote host is 7.0 prior to 7.0.0.45, 8.0 prior to 8.0.0.14, 8.5 prior to 8.5.5.13, or 9.0 prior to 9.0.0.5. It is, therefore, affected by an unspecified information disclosure flaw due to sensitive information being cached insecurely...
CVE-2017-1327
IBM iNotes versions 8.5 and 9.0 are affected by a cross-site scripting (XSS) vulnerability in the Web UI. The issue allows an attacker to embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. Connected documents corroborate ...
CVE-2017-1332
CVE-2017-1332 affects IBM iNotes 8.5 and 9.0, where a cross-site scripting flaw in the Web UI can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Public data shows CVSS scores (NVD) of 6.1 (CVSS3.0) and 4.3 (CVSS2.0); explo...
CVE-2017-1217
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123857...
CVE-2017-1217
CVE-2017-1217 affects IBM WebSphere Portal 8.5 and 9.0, where improper handling of user input enables cross-site scripting in the Web UI, potentially allowing an attacker to inject JavaScript and cause credentials disclosure within a trusted session. The provided documents do not specify a patch ...
Linux Kernel (Debian 7.7/8.5/9.0 / Ubuntu 14.04.2/16.04.2/17.04 / Fedora 22/25 / CentOS 7.3.1611) - 'ldso_hwcap_64 Stack Clash' Local Privilege Escalation
/ Linuxldsohwcap64.c for CVE-2017-1000366, CVE-2017-1000379 Copyright C 2017 Qualys, Inc. myimportanthwcaps adapted from elf/dl-hwcaps.c, part of the GNU C Library: Copyright C 2012-2017 Free Software Foundation, Inc. This program is free software: you can redistribute it and/or modify it under t...
CVE-2017-1214
CVE-2017-1214 affects IBM iNotes 8.5 and 9.0 and is described in multiple sources as a remote information-disclosure vulnerability. The available documents indicate that a attacker could send a malformed e‑mail to a victim, and opening it could disclose information. Some sources (OpenVAS) referen...
CVE-2017-1214
IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM X-Force ID: 123854...
IBM Domino 8.5.x / 9.0.x < 9.0.1 Fix Pack 8 TLS Server Diffie-Hellman Key Validation MitM
According to its banner, the version of IBM Domino formerly IBM Lotus Domino running on the remote host is 8.5.x or 9.0.x prior to 9.0.1 Fix Pack 8. It is, therefore, affected by a flaw in the TLS server due to improper validation of Diffie-Hellman parameters. A man-in-the-middle MitM attacker ca...
CVE-2017-1140
IBM Business Process Manager (BPM) versions 8.0 and 8.5 are affected by a cross-site scripting (XSS) vulnerability due to improper neutralization of user-supplied input in the Web UI, potentially allowing an attacker to embed arbitrary JavaScript and cause credential disclosure within a trusted s...