20289 matches found
EulerOS 2.0 SP8 : xerces-j2 (EulerOS-SA-2020-1889)
According to the version of the xerces-j2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML...
CVE-2012-2201
CVE-2012-2201 affects IBM WebSphere MQ 7.1. The DoS arises from an error when handling user IDs, enabling a remote attacker to bypass security configuration on a SVRCONN channel and flood the queue manager. Connected sources confirm the vulnerability in WebSphere MQ 7.1 and describe denial-of-ser...
CVE-2012-2160
IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the SUPPTEMPLATEFLAG parameter in a specially-crafted URL to execute script in a victim's Web browser within the security...
CVE-2012-2160
CVE-2012-2160 affects IBM Rational Change 5.3. The vulnerability arises from improper validation of user-supplied input, enabling a cross-site scripting attack via the SUPP_TEMPLATE_FLAG URL parameter. When a victim clicks a specially crafted link, an attacker could execute script in the browser ...
JVN#62161191: JavaFX WebEngine does not properly restrict Java method execution
JavaFX, GUI library for Java applications, is provided with OracleJDK 7 through 10. Since OracleJDK 11, JavaFX is separately maintained and developed by OpenJFX project under OpenJDK community. JavaFX WebEngine component is capable of web content rendering, and possible to be configured to allow...
Security Bulletin: Grep vulnerabilities affect IBM SmartCloud Entry (CVE-2012-5667)
Summary IBM SmartCloud Entry is vulnerable to several Grep vulnerabilities. Remote attackers can exploit them to obtain sensetive information or launch further attacks on the system. Vulnerability Details CVEID: CVE-2012-5667 DESCRIPTION: grep is vulnerable to a heap-based buffer overflow, caused...
CVE-2012-6490
This CVE entry is rejected; it does not represent an active vulnerability.
CVE-2012-6487
CVE-2012-6487: This CVE entry is rejected and not used.
CVE-2012-6484
CVE-2012-6484 entry is rejected/not used and does not represent an active vulnerability.
CVE-2012-6481
This CVE entry is rejected/not used; it should not be considered an active vulnerability entry.