Security Bulletin: IBM Maximo Asset Management is affected by a cross-site scripting vulnerability. (CVE-2018-1554)

Summary IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details CVEID:...

Partner Perspectives: How Axonius and Carbon Black Make Seeing and Securing All Assets Radically Simple

Back in the 1990s, visibility and security were much easier. In the workplace, users connected their laptops and desktops to a network through a cable. Asset inventory was as simple as walking from cubicle to cubicle or entering specs into a spreadsheet. And then, of course, things became much mo...

Code injection

The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...

CVE-2018-12959

The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...

Security Bulletin: Security vulnerabilities have been identified in the WebSphere Application Server where the RAM is deployed.

Summary In the WebSphere Application Server where the Rational Asset Manager is deployed, a remote attacker could exploit the vulnerabilities such as spoofing attacks, execute arbitrary codes, exploit sensitive information and so on. Information about these security vulnerabilities affecting...

[SECURITY] Fedora 28 Update: rubygem-sprockets-3.7.2-1.fc28

Sprockets is a Rack-based asset packaging system that concatenates and serv es JavaScript, CoffeeScript, CSS, LESS, Sass, and SCSS...

[SECURITY] Fedora 27 Update: rubygem-sprockets-3.7.2-1.fc27

Sprockets is a Rack-based asset packaging system that concatenates and serv es JavaScript, CoffeeScript, CSS, LESS, Sass, and SCSS...

Debian DSA-4242-1 : ruby-sprockets - security update

Orange Tsai discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker can take advantage of this flaw to read arbitrary files outside an application's root directory via specially crafted requests, when the Sprockets server is used in production. C...

[SECURITY] [DSA 4242-1] ruby-sprockets security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4242-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 09, 2018 https://www.debian.org/security/faq -...

CVE-2018-13223

The sell function of a smart contract implementation for R Time Token v3 RS Contract Name: RTokenMain, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13225

The sell function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13198

The sell function of a smart contract implementation for STeX Exchange ICO STE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13214

The sell function of a smart contract implementation for GMile, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13206

The sell function of a smart contract implementation for ProvidenceCasino PVE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for Providence Crypto Casino PVE Contract Name: ProvidenceCasinoToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for TiTok - Ticket Token Contract Name: MyAdvancedToken7, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13230

The sell function of a smart contract implementation for DestiNeed DSN, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13224

The sell function of a smart contract implementation for Virtual Energy Units VEU Contract Name: VEUTokenERC20, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13229

The sell function of a smart contract implementation for RiptideCoin RIPT, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...