Lucene search
+L

1789 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/15 11:49 p.m.•39 views

Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities

Summary This bulletin addresses several security vulnerabilities that are fixed in IBM Cognos Analytics 11.0.8.0 GA as well as 11.0.7.0 and 11.0.6.0 Interim Fixes Vulnerability Details CVEID: CVE-2017-1783 DESCRIPTION: IBM Cognos Analytics could allow a local user to change parameters set from th...

7.8CVSS6.1AI score0.00462EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2018/06/11 9:29 p.m.•19 views

DEBIAN-CVE-2018-5131

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

5.9CVSS8.2AI score0.02293EPSS
SaveExploits0References1
OSV
OSV
•added 2018/06/11 9:29 p.m.•18 views

CVE-2018-5131

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

5.9CVSS8.6AI score
SaveExploits0References11
NVD
NVD
•added 2018/06/11 9:29 p.m.•25 views

CVE-2018-5131

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

5.9CVSS6.6AI score0.02293EPSS
SaveExploits0References11
OSV
OSV
•added 2018/06/11 9:29 p.m.•9 views

CVE-2017-7753

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

9.1CVSS7.8AI score
SaveExploits0References11
OSV
OSV
•added 2018/06/11 9:29 p.m.•14 views

DEBIAN-CVE-2017-7753

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

9.1CVSS8.6AI score0.03145EPSS
SaveExploits1References1
CVE
CVE
•added 2018/06/11 9:00 p.m.•195 views

CVE-2018-5131

CVE-2018-5131 affects Mozilla Firefox (ESR < 52.7 and Firefox

5.9CVSS6.3AI score0.02293EPSS
SaveExploits0References11Affected Software1
Cvelist
Cvelist
•added 2018/06/11 9:00 p.m.•42 views

CVE-2018-5131

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

6.5AI score0.02293EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2018/06/11 9:00 p.m.•52 views

CVE-2017-7753

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

8AI score0.03145EPSS
SaveExploits1References11
CVE
CVE
•added 2018/06/11 9:00 p.m.•198 views

CVE-2017-7753

CVE-2017-7753 is an out-of-bounds read in the rendering path when applying style rules to pseudo-elements (e.g., ::first-line) using cached style data. Affected products/versions include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

9.1CVSS7.8AI score0.03145EPSS
SaveExploits1References11Affected Software1
CNVD
CNVD
•added 2018/05/29 12:00 a.m.•20 views

HAProxy Information Disclosure Vulnerability

HAProxy is an open source TCP/HTTP load balancing server from the French company HAProxy. The server provides 4-layer , 7-layer proxy , and can support tens of thousands of level of connections , with high efficiency , stability and other characteristics . A security vulnerability exists in HAPro...

5.9CVSS6.9AI score0.02915EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2018/05/22 4:52 p.m.•16 views

cxf: CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens

It was found that the token cacher in Apache cxf uses a flawed way of caching tokens that are associated with the delegation token received from Security Token Service STS. This vulnerability could allow an attacker to craft a token which could return an identifier corresponding to a cached token...

7.5CVSS7.2AI score0.06827EPSS
SaveExploits0References5
OSV
OSV
•added 2018/04/03 6:29 a.m.•11 views

CVE-2018-4168

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate attackers to obtain sensitive information by leveraging the display of cached data on a locked device...

4.6CVSS7.3AI score0.00369EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/03 12:00 a.m.•3 views

CVE-2018-4168: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate attackers to obtain sensitive information by leveraging the display of cached data on a locked device...

4.6CVSS6.1AI score0.00369EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/03/30 12:00 a.m.•13 views

Apple iOS Files Widget Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and Files Widget is one of the file tool components. A security vulnerability exists in the Files Widget component in Apple iOS versions prior to 11.3, which can be exploited to obtain sensitive information by displaying cach...

4.6CVSS6.1AI score0.00369EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2018/03/15 11:24 a.m.•19 views

Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

5.9CVSS7.3AI score0.02293EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2018/03/15 11:06 a.m.•17 views

Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

5.9CVSS7.3AI score0.02293EPSS
SaveExploits0References5
OSV
OSV
•added 2018/03/14 12:00 a.m.•16 views

UBUNTU-CVE-2018-5131

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

5.9CVSS6.9AI score0.02293EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2018/03/14 12:00 a.m.•30 views

CVE-2018-5131

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

5.9CVSS6.9AI score0.02293EPSS
SaveExploits0References3
Prion
Prion
•added 2018/03/12 9:29 p.m.•27 views

Information disclosure

IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached browser data. IBM X-Force ID: 110328...

2.1CVSS5.7AI score0.00341EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder