CVE-2018-1724

The CVE-2018-1724 issue affects IBM Spectrum LSF: versions 9.1.1, 9.1.2, 9.1.3, and 10.1. A local user could change their job user at submission due to improper file permission settings on the eauth mechanism. The reported root cause relates to the eauth executable’s permissions that enable user ...

IBM Campaign Cross-Site Scripting Vulnerability (CNVD-2018-18596)

IBM Campaign formerly known as Unica Campaign is a management solution from IBM in the United States used to help marketers design, execute, measure, and optimize marketing advertising. A cross-site scripting vulnerability exists in IBM Campaign versions 9.1, 9.1.2, and 10, which can be exploited...

CVE-2017-1114

IBM Campaign versions 9.1, 9.1.2, and 10 are affected by a cross-site scripting flaw in the Web UI. The vulnerability allows an attacker to inject arbitrary JavaScript, potentially altering UI behavior and leading to credentials disclosure within a trusted session. Some sources note remote exploi...

CVE-2015-4954

IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified vectors. IBM X-Force ID: 105200...

Proclaim, 9.1.1, Arbitrary File Upload

Proclaim from Christian Web Ministries installs as combiblestudy, versions 9.1.1 and previous, arbitrary file upload, also backup file download resolution: update to 9.1.2 fixes both issues update notice: https://github.com/Joomla-Bible-Study/Joomla-Bible-Study/releases...

SQL Injection Vulnerability in Zendo Version 9.1.2

Zendo is an open source project management software. A SQL injection vulnerability exists in Zendo version 9.1.2 due to the system failing to effectively filter user-submitted data. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Zendo 9.1.2 zentao\lib\base\dao\dao.class.php Page

Zendo is an open source project management software. Zendo project management software version 9.1.2 zentao\lib\base\dao\dao.class.php page SQL injection vulnerability. The orderBy function fails to filter the data submitted by the user, allowing an attacker to exploit the vulnerability to obtain...

About the security content of Safari 9.1.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

IBM BigFix Remote Control SQL Injection Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A SQL injection vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary SQL commands...

IBM BigFix Remote Control Cross-Site Request Forgery Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A cross-site request forgery vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker can exploit this vulnerability to perform a cross-site request attack...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11864)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. An information disclosure vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions, which stems from the program failing to enable the HSTS protection mechanism. A remote attacker can...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11861)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. An information disclosure vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker could exploit the vulnerability to obtain sensitive information...

IBM BigFix Remote Control Cross-Site Scripting Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A cross-site scripting vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

IBM BigFix Remote Control XML Injection Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker can exploit this vulnerability to conduct XML injection attacks...

Apple iOS Cross-Site Scripting Vulnerability

Apple iOS is an operating system for handheld devices developed by Apple Inc. A cross-site scripting vulnerability exists in Apple iOS before 9.3.3, Safari before 9.1.2, which allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/09 response...

Cross-Site Scripting Vulnerability in Multiple Apple Products

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems. tvOS is an operating system for smart TVs. webKit Page Loading is a WebKit...

UBUNTU-CVE-2016-4624

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623...

IBM Marketing Platform SQL Injection Vulnerability

IBM Marketing Platform is a suite of marketing platforms from IBM in the United States. The platform supports marketers in leveraging and analyzing customer interactions on websites, cell phones and social media to deliver targeted marketing campaigns to customers. A SQL injection vulnerability...

Adobe Reader/Acrobat远程安全绕过漏洞

Bugraq ID: 37763 CVE ID：CVE-2009-3956 Adobe Reader/Acrobat是流行的处理PDF文件的应用程序。 默认的安全加强配置存在安全问题，允许脚本注入攻击。目前没有详细漏洞细节提供。 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reade...

Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation (Python)

Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation Python !/usr/bin/env python Adobe Acrobat v9.1.2 Local Privilege Escalation Exploit Coded By: DrIDE Discovered by: Nine:Situations:Group Tested On: Windows XP SP2, Requires NOS Package Installed Usage: python DrIDE-Adobe912.py import os,...