WordPress CherryFramework Themes 3.1.4 Backup File Download

Exploit Title: Wordpress CherryFramework Themes 3.1.4 - Backup File Download Google Dork: inurl:/wp-content/themes/CherryFramework Date: 2018-11-17 Exploit Author: b1p0l4r Vendor Homepage: http://www.cherryframework.com/ Software Link: http://www.cherryframework.com/ Version: 3.x.x 3.1.4 Tested o...

IBM InfoSphere Master Data Management Collaborative Edition Information Disclosure Vulnerability

IBM InfoSphere Master Data Management MDM is an IBM solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

Design/Logic Flaw

IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. IBM X-Force ID: 138077...

SUSE SLES12 Security Update : postgresql10 (SUSE-SU-2018:3074-2)

This update for brings postgresql10 version 10.5 to SUSE Linux Enterprise 12 SP3. FATE325659 bnc1108308 This release marks the change of the versioning scheme for PostgreSQL to a 'x.y' format. This means the next minor releases of PostgreSQL will be 10.1, 10.2, ... and the next major release will...

HPE UIoT Unauthorized Access Vulnerability Vulnerability

HPE UIoT is a suite of universal IoT platforms from Hewlett Packard Enterprise HPE, USA. The platform features data analytics, monetary safety and synchronization management. A security vulnerability exists in the DSM portal and DSM APIs in HPE UIoT. A remote attacker could exploit the...

CVE-2018-7111

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users...

Security Bulletin: IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information.

Summary IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. Vulnerability Details CVEID: CVE-2018-1380 DESCRIPTION: IBM InfoSphere Master Data Management ...

Cloud data management firm exposes database with over 440M emails & IP addresses

By Waqas Data management software companies are mandatorily believed to be having perfectly capable of managing their own data. However, it turns out that some companies, the most popular ones too, struggle to do so. The well-known cloud data management firm Veeam has been in the news lately for...

SAP SRM MDM Catalog Authentication Bypass Vulnerability

SAP SRM is a supplier relationship management solution from SAP, of which MDM Catalog is a component with catalog content management and purchasing catalog functionality. An authentication bypass vulnerability in SAP SRM MDM Catalog versions 3.73, 7.31, and 7.32, which originates from a failure o...

ON PREM vs. CLOUD.

Security and Other considerations. Part 2 By Johan Nordstrom To be able to keep up with the development of new security threats, companies need to rethink their security strategies. The basics must be to decrease complexity and use automated solutions when possible. There has been a change in the...

CVE-2018-2915

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Hyperion...

Security Bulletin: Critical Security Vulnerability in RDS Client library affecting Rational Change (CVE-2014-3089)

Summary Clear text password in IBM Rational Directory Server RDS supplied Client library could allow potential hacker to gain access to RDS and access to unauthorized data used by consuming products such as Rational Change. Vulnerability Details | Subscribe to My Notifications to be notified of...

Security Bulletin: IBM Master Data Management on Cloud is affected by vulnerabilities known as Spectre and Meltdown

Summary IBM Master Data Management on Cloud is affected by the vulnerabilities known as Spectre and Meltdown, which can enable CPU data cache timing to be abused to bypass conventional memory security restrictions to gain access to privileged memory that should be inaccessible. Vulnerability...

Security Bulletin: IBM MDM Software report download without authentication affects IBM InfoSphere Master Data Management Collaboration Server

Summary IBM InfoSphere Master Data Management - Collaborative Edition could allow an unauthorized user to download reports without authentication Vulnerability Details CVEID: CVE-2017-1523 DESCRIPTION: IBM InfoSphere Master Data Management - Collaborative Edition could allow an unauthorized user ...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2017 - Includes Oracle Jul 2017 CPU affects IBM InfoSphere Master Data Management

Summary IBM Initiate Master Data Service is vulnerable to Oracle Java SE and Java SE Embedded issues and could allow remote attackers to affect the confidentiality, integrity, and availability. Vulnerability Details CVEID: CVE-2017-10198 DESCRIPTION: An unspecified vulnerability in Oracle Java SE...

Security Bulletin: IBM InfoSphere Reference Data Management affected by Privilege Escalation vulnerability(CVE-2015-1945)

Summary IBM InfoSphere Reference Data Management is vulnerable to Privilege Escalation attack caused by improper authorization check. Vulnerability Details CVEID: CVE-2015-1945 DESCRIPTION: IBM InfoSphere Master Data Management Server could allow an authenticated attacker to gain escalated...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM InfoSphere Master Data Management (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects OpenSSL. OpenSSL is used by IBM InfoSphere Master Data Management. IBM InfoSphere Master Data Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protoc...

Security Bulletin: Denial of service vulnerability in OpenSSL affects IBM InfoSphere Master Data Management (CVE-2017-3733)

Summary IBM Initiate Master Data Service is vulnerable to an OpenSSL denial of service attack and could cause the application to crash. Vulnerability Details CVEID: CVE-2017-3733 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error during a renegotiate handshake when the...

Security Bulletin: IBM® InfoSphere® Master Data Management Collaborative Edition is affected by a vulnerability in the IBM Dojo Toolkit (CVE-2014-8917)

Summary Web applications in IBM InfoSphere Master Data Management Collaborative Edition might be subject to cross site scripting vulnerability using file uploader services from the IBM Dojo Toolkit . Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: The IBM Dojo Toolkit is vulnerable to cro...

Security Bulletin: Blind SQL Injection vulnerability in GDS component of IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2014-0966)

Summary IBM InfoSphere Master Data Management - Collaborative Edition could allow an attacker steal data by exploiting Blind SQL Injection. Vulnerability Details Description: IBM InfoSphere Master Data Management - Collaborative Edition is vulnerable to SQL injection. A remote attacker could send...