CVE-2017-8031

The CVE-2017-8031 entry concerns Cloud Foundry cf-release and UAA. Affected products: cf-release (all versions before v279) and UAA (30.x before 30.6; 45.x before 45.4; 52.x before 52.1). Issue: an authenticated user for a given client can revoke client tokens belonging to other users on the same...

[SECURITY] Fedora 26 Update: mediawiki-1.28.3-1.fc26

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...

Denial Of Service (DoS)

symfony/symfony and symfony/http-foundation are vulnerable to denial of service DoS attacks. The attacks can happen because it uses the pregmatch method rather that the pregreplace function when checking HTTP host name input from user in the getHost function...

CVE-2017-14390: CF-deployment 0.35.0 syslog misconfiguration | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions cf-deployment v0.35.0 Description A misconfiguration with Loggregator and syslog-drain in cf-deployment causes logs to be drained to unintended locations. Mitigation Users of affected versions should appl...

CVE-2017-14388

Cloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the grootfs volume cache. For example, this could allow an attacker to provide an image layer that GrootFS would consider to be the Ubuntu base layer...

CVE-2017-13821

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Unspecified Information Disclosure Vulnerability in Multiple IBM Product Jazz Foundation based Applications

IBM Rational Collaborative Lifecycle Management is a set of collaborative lifecycle management solutions.Rational Quality Manager is a set of collaborative, Web-based quality management solutions. IBM Rational Collaborative Lifecycle Management is a collaborative lifecycle management solution,...

HP UCMDB Foundation Software Directory Traversal Vulnerability

HP UCMDB Foundation Software is able to provide users with bottom-up capabilities that include four parts: infrastructure auto-discovery, data modeling, service mapping definition and service impact analysis. A directory traversal vulnerability exists in HP UCMDB Foundation Software, which could...

IBM Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2017-34461)

IBM Jazz Foundation is a software development collaboration platform. A cross-site scripting vulnerability exists in IBM Jazz Foundation. An attacker can exploit this vulnerability to embed arbitrary JavaScript code in the web UI, resulting in the disclosure of session information...

CVE-2017-1164

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

CVE-2017-1241

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...

Cross site scripting

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

CVE-2017-1164

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

CVE-2017-1241

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...

Design/Logic Flaw

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...

CVE-2017-1164

CVE-2017-1164 is an IBM Jazz Foundation cross-site scripting vulnerability. The IBM bulletin groups it with multiple vulnerabilities affecting IBM Jazz Team Server products (CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM) and confirms the issue as a reflected web UI XSS that can lead to credentia...

CVE-2017-1241

CVE-2017-1241 is a vulnerability described in IBM/CLM Jazz Foundation based applications, where an unspecified issue could cause stack trace information to be exposed to an attacker. The related IBM Security Bulletin lists multiple Jazz-based products affected (e.g., Rational CLM, RDNG, RELM, RTC...

CVE-2017-1241

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...

CVE-2017-1164

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

Mozilla Firefox 55 - Denial of Service

Mozilla Firefox 55 - Denial of Service Exploit Title: Mozilla Firefox Firefox Lockout Vulnerability"; //Content to be forcibly viewed echo ""; //End echo "setTimeout"location.href ='".$location."';",10000;"; ? Solution: Update to version 55 https://www.mozilla.org/en-US/firefox/55.0/releasenotes/...