38612 matches found
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Content Manager Enterprise Edition 8.5.0 (CVE-2016-3449, CVE-2016-0264)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 that is used by Content Manager Enterprise Edition. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Vulnerability Details If you run your own Java code using the IBM Java Runtime...
Security Bulletin: A vulnerability in the GSKit component of Content Manager Enterprise Edition (CVE-2016-0201)
Summary A vulnerability has been addressed in the GSKit component of Content Manager Enterprise Edition. Vulnerability Details CVEID: CVE-2016-0201 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a MD5 collision. An attacker could exploit this...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Content Manager Enterprise Edition ( CVE-2016-0385)
Summary IBM WebSphere Application Server is shipped as a component of Content Manager Enterprise Edition. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...
Security Bulletin: Flexera InstallShield has a security vulnerability that affects Content Manager Enterprise Edition Client for Windows (CVE-2016-2542)
Summary Flexera InstallShield has a security vulnerability that could be exploited in Content Manager Enterprise Edition V8.4.3 Client for Windows. The Content Manager Enterprise Edition V8.4.3 base and fixpack utilizes the Flexera InstallShield. Vulnerability Details CVEID: CVE-2016-2542...
CVE-2016-5202
creationtimestamp| type| source ---|---|--- 2024-01-27 14:41:27+00:00| seen| https://t.me/ctinow/174776...
CVE-2016-2358
creationtimestamp| type| source ---|---|--- 2024-01-27 14:11:20+00:00| seen| https://t.me/ctinow/174772...
GLSA-202401-26 : Apache XML-RPC: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202401-26 Apache XML-RPC: Multiple Vulnerabilities - XML external entity XXE vulnerability in the Apache XML-RPC aka ws-xmlrpc library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forger...
CVE-2016-15037
creationtimestamp| type| source ---|---|--- 2024-01-21 07:31:30+00:00| seen| https://t.me/ctinow/170758 2024-02-15 11:21:18+00:00| seen| https://t.me/ctinow/185416...
CVE-2016-15037
CVE-2016-15037 affects go4rayyan Scumblr up to version 2.0.1a, with the vulnerability residing in the Task Handler component and enabling cross-site scripting. The issue can be triggered remotely; a patch is available in version 2.0.2, identified by the patch hash 5c9120f2362ddb7cbe48f2c4620715ad...
EulerOS Virtualization 2.11.0 : syslinux (EulerOS-SA-2023-3081)
According to the versions of the syslinux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer...
EulerOS Virtualization 2.9.0 : syslinux (EulerOS-SA-2023-3110)
According to the versions of the syslinux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer...
wecanmedia.co.uk Cross Site Scripting vulnerability OBB-3834280
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2016-20021
In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerable...
CVE-2016-20021
CVE-2016-20021 affects Gentoo Portage prior to 3.0.47, where missing PGP validation of executed code occurs in the webrsync path. The vulnerability arises because the standalone emerge-webrsync downloads a .gpgsig but does not verify its signature, enabling potential tampering if emerge-webrsync ...
CVE-2016-4000
creationtimestamp| type| source ---|---|--- 2024-01-09 11:41:19+00:00| seen| https://t.me/ctinow/164962...
CVE-2016-11015
creationtimestamp| type| source ---|---|--- 2024-01-09 08:07:17+00:00| seen| https://t.me/ctinow/164839...
Medium: python-pillow
Issue Overview: Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.mapbuffer in map.c component. CVE-2016-9189 Affected Packages: python-pillow Note: Thi...
CVE-2016-6329
creationtimestamp| type| source ---|---|--- 2024-01-08 12:19:23+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3548 2024-02-15 00:48:21+00:00| seen| https://t.me/marianaalecu/3622 2024-02-15 00:49:09+00:00| seen| https://t.me/endsodomaofficial/7318 2024-02-15 02:55:48+00:00| seen|...