CVE-2015-5771

Quartz Composer Framework in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted QuickTime file...

Memory corruption

Quartz Composer Framework in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted QuickTime file...

Mac OS X Multiple Vulnerabilities (Security Update 2015-006)

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-006. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - CoreText - FontParser - Libinfo - libxml2 - OpenSSL - perl - PostgreSQL - QL...

CVE-2015-5771

CVE-2015-5771 affects Apple OS X Quartz Composer Framework. Based on the provided documents, the vulnerability arises from memory corruption in the framework’s handling/parsing of QuickTime files, allowing remote attackers to execute arbitrary code or cause an application crash on OS X versions p...

CVE-2015-5771: Improper Restriction of Operations within the Bounds of a Memory Buffer

Quartz Composer Framework in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted QuickTime file...

PT-2015-1917

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted QuickTime file. This is caused by a...

CVE-2015-0130: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager RQM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert RTC 4.x before 4.0....

IBM Rational Requirements Composer and Rational DOORS Next Generation Local Elevation of Privilege Vulnerability

IBM Rational Requirements Composer and Rational DOORS Next Generation RDNG are requirements management solutions from IBM USA. When WebSphere Application Server and LTPA single sign-on used in IBM Rational Requirements Composer and RDNG are used together, the program fails to terminate the...

Design/Logic Flaw

IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation RDNG 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management RM session upon LTPA token...

CVE-2015-0121

CVE-2015-0121 affects IBM Rational Requirements Composer (RRC) versions 3.0–3.0.1.6 and 4.0–4.0.7, and Rational DOORS Next Generation (RDNG) 4.0–4.0.7 and 5.0–5.0.2. When WebSphere Application Server uses LTPA single sign-on, the RM session is not terminated after LTPA token expiration, allowing ...

CVE-2015-0121

IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation RDNG 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management RM session upon LTPA token...

PT-2015-4482

Name of the Vulnerable Software and Affected Versions IBM Rational Requirements Composer versions 3.0 through 3.0.1.6 IBM Rational Requirements Composer versions 4.0 through 4.0.7 Rational DOORS Next Generation RDNG versions 4.0 through 4.0.7 Rational DOORS Next Generation RDNG versions 5.0 throu...

CVE-2015-0121: Undefined Security Weakness

IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation RDNG 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management RM session upon LTPA token...

Composer Remote Code Execution Vulnerability

Composer is a set of tools for managing PHP dependencies. A remote code execution vulnerability exists in Composer, which can be exploited by a remote attacker to submit a special request and execute arbitrary code...

CVE-2015-0113

The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next...

CVE-2015-0113

The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next...

PT-2015-4477

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 4.0 through 5.0.2 IBM Rational Quality Manager versions 4.0 through 4.0.7 and 5.0 through 5.0.2 IBM Rational Team Concert versions 4.0 through 4.0.7 and 5.0 through 5.0.2 IBM Rational...

CVE-2015-0113: Exposure of Sensitive Information to an Unauthorized Actor

The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next...

IBM Rational DOORS Next Generation and Rational Requirements Composer Denial of Service Vulnerabilities

IBM Rational DOORS Next Generation and Rational Requirements Composer are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A security vulnerability exists in the XML parser of IBM...

IBM Rational DOORS Next Generation and Rational Requirements Composer Cross-Site Scripting Vulnerability

IBM Rational DOORS Next Generation and Rational Requirements Composer are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting vulnerability exists in IBM Ration...