CVE-2018-13714

CVE-2018-13714 concerns the mintToken function in a CM Ethereum token smart contract. Affected component: the CM token’s smart contract code. Root cause: integer overflow in mintToken that allows the contract owner to set the balance of an arbitrary address. Impact: potential manipulation of toke...

CVE-2018-13714: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for CM, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearQuest (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)

Summary IBM HTTP Server IHS is shipped as a component of IBM Rational ClearQuest. Information about security vulnerabilities affecting IHS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section. Affected Products an...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Rational ClearQuest

Summary IBM WebSphere Application Server is shipped as a component of IBM Rational ClearQuest. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details | Subscribe to My Notifications to be notified of...

cm-boticas.pt XSS vulnerability

Open Bug Bounty ID: OBB-626040 Description| Value ---|--- Affected Website:| cm-boticas.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-covilha.pt XSS vulnerability

Open Bug Bounty ID: OBB-622473 Description| Value ---|--- Affected Website:| cm-covilha.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-condeixa.pt XSS vulnerability

Open Bug Bounty ID: OBB-611686 Description| Value ---|--- Affected Website:| cm-condeixa.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Xxe

Multiple XML external entity XXE vulnerabilities in 1 CQWeb / CM Server, 2 ClearQuest Native client, 3 ClearQuest Eclipse client, and 4 ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1....

cm-montalegre.pt XSS vulnerability

Open Bug Bounty ID: OBB-603649 Description| Value ---|--- Affected Website:| cm-montalegre.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-gois.pt XSS vulnerability

Open Bug Bounty ID: OBB-603592 Description| Value ---|--- Affected Website:| cm-gois.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Windows Kernel 64-bit pool memory disclosure via REG_RESOURCE_REQUIREMENTS_LIST registry values(CVE-2018-0900)

We have discovered a Windows kernel memory disclosure vulnerability through the contents of "FilteredConfigVector" registry values of type REGRESOURCEREQUIREMENTSLIST, which can be found under HKLM\SYSTEM\CurrentControlSet\Enum\ACPI\\Control\FilteredConfigVector. The vulnerability affects 64-bit...

cm-consulting.ch XSS vulnerability

Open Bug Bounty ID: OBB-582318 Description| Value ---|--- Affected Website:| cm-consulting.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-gois.pt XSS vulnerability

Open Bug Bounty ID: OBB-575944 Description| Value ---|--- Affected Website:| cm-gois.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-oaz.pt XSS vulnerability

Open Bug Bounty ID: OBB-565849 Description| Value ---|--- Affected Website:| cm-oaz.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-serpa.pt XSS vulnerability

Open Bug Bounty ID: OBB-557330 Description| Value ---|--- Affected Website:| cm-serpa.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www4.cm-seixal.pt Open Redirect vulnerability

Open Bug Bounty ID: OBB-549539 Description| Value ---|--- Affected Website:| www4.cm-seixal.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure...

CVE-2018-5326

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

Code injection

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

CVE-2018-5326

CVE-2018-5326 affects Cheetah Mobile CM Browser 5.22.06.0012 on older Android platforms, described as a Same Origin Policy bypass . External documents confirm the vulnerability exists in this specific version, enabling cross-origin policy circumvention. The CVSS data provided indicates a network-...

CVE-2018-5326: Undefined Security Weakness

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...