Security Bulletin: Security vulnerabilities in ActiveMQ 5.2.0 affect IBM Sterling B2B Integrator (CVE-2015-1830, CVE-2014-8110, CVE-2013-3060, CVE-2013-1880, CVE-2013-1879, CVE-2012-6551, CVE-2012-6092, CVE-2010-1587, CVE-2010-1244, CVE-2010-0684)

Summary Multiple directory traversal, cross-site scripting, denial of service and cross-site request forgery security vulnerabilities in ActiveMQ 5.2.0. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1830 DESCRIPTION: Apache ActiveMQ could all...

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8110, CVE-2018-8111...

CVE-2018-8110

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8111, CVE-2018-8236...

CVE-2018-8110

CVE-2018-8110 describes a remote code execution in Microsoft Edge caused by improper access to in-memory objects (memory corruption). Affected software is Edge; the root cause is stated as memory access issues, with related entries for CVE-2018-8236 and CVE-2018-8111 describing identical behavior...

Microsoft Edge Memory Corruption (CVE-2018-8110)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge CVE-2018-8110 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Edge Recommendations...

Apache ActiveMQ < 5.10.1 Multiple Security Vulnerabilities - Windows

Apache ActiveMQ is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...

Apache ActiveMQ < 5.10.1 Multiple Security Vulnerabilities - Linux

Apache ActiveMQ is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...

CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

CVE-2017-8110 affects www.modified-shop.org’s eCommerce Shopsoftware 2.0.2.2 rev 10690, with an XML External Entity (XXE) vulnerability in api/it-recht-kanzlei/api-it-recht-kanzlei.php. The CNVD entry notes risk of reading arbitrary files or DoS via XXE; other sources corroborate the same vulnera...

CVE-2015-8110

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...

CVE-2015-8110

Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 contains a local privilege escalation in the Tvsukernel.exe GUI. In the context of a temporary administrator account, users can exploit navigation paths like “Click here to learn more” or “View privacy policy” to gain Adm...

Lenovo System Update found two mention of the right to exploit the principle of analysis-vulnerability warning-the black bar safety net

Lenovo released the latest System Update announcement in two mention the right vulnerability is me in a few weeks to submitCVE-2 0 1 5-8 1 0 9, CVE-2 0 1 5-8 1 1 0IOActive as well as Lenovo in this report issued a warning! Details of the bedding In the detoxification of the details before we star...

CVE-2014-8110

Multiple cross-site scripting XSS vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8110

Apache ActiveMQ (5.x) prior to 5.10.1 is affected by cross-site scripting in the web-based admin console (CVE-2014-8110). Attacks could inject script/HTML via unspecified vectors and, per related IBM advisories, could lead to credential theft via cookies. Remote exploitation is possible if expose...