CVE-2017-4970

An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the Static file build pack causes the Staticfile.auth configuration to be ignored when the Static file file is not present in the application root...

CVE-2017-4991

CVE-2017-4991 affects Cloud Foundry products: cf-release versions before v260 and multiple UAA releases (2.x before v2.7.4.16; 3.6.x before v3.6.10; 3.9.x before v3.9.12; others before v3.17.0) plus UAA-bosh releases (uaa-release) before v13.14, v24.9, v30.2, and earlier versions before v36. The ...

CVE-2016-8218

CVE-2016-8218 affects Cloud Foundry’s routing-release (versions prior to 0.142.0) and cf-release (203–231). The issue is incomplete validation in JSON Web Token (JWT) libraries, enabling unprivileged attackers to impersonate other users to the routing API. Remediation: upgrade routing-release to ...

CVE-2016-6655

CVE-2016-6655 affects Cloud Foundry Foundation Cloud Foundry releases prior to v245 and cf-mysql-release prior to v31. A command injection vulnerability exists in a common script used by many Cloud Foundry components, enabling a malicious user to execute arbitrary commands on affected servers. Th...

CVE-2017-4992

CVE-2017-4992 affects Cloud Foundry components including cf-release prior to v261 and UAA releases prior to specified versions (2.x before 2.7.4.17, 3.6.x before 3.6.11, 3.9.x before 3.9.13, and other versions before v4.2.0; UAA bosh releases prior to 13.x before 13.15, 24.x before 24.10, 30.x be...

CVE-2016-8218

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token JWT libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT...

Update Rollup 12 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 12 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 12 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. It also contains the installation instructions fo...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: Please reference CVE/URL list for details...

humboldt-foundation.de XSS vulnerability

Vulnerable URL: https://www.humboldt-foundation.de/web/wtshow.search?plang=deform=0buttonhidden=searchflag=webid=102search=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3D%22y%22+onerror%3Dalert%28%2Fopenbugbounty%2F%29%3Ebutton=Sucheoperator=AND Details: Description| Value ---|--- Patched:| No Latest chec...

About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

The vulnerabilities in Microsoft Word, Skype for Business, Microsoft Office, Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft Office Web Apps, and Office Online Server allow attackers to execute arbitrary code.

The vulnerabilities of Microsoft Word, Skype for Business, Microsoft Office, Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft Office Web Apps, and Office Online Server are related to improper data processing. Exploiting these vulnerabilities allows a malicious actor to...

Code injection

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

EFF Sues DOJ Over National Security Letter Disclosure Rules

The Electronic Frontier Foundation sued the United States Department of Justice Wednesday demanding to know whether the agency is complying with rules that mandate a periodic review of National Security Letter gag orders. The suit, filed in U.S. District Court for the Northern District of...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

IBM Cognos Business Intelligence Server Predictive Solutions Foundation Information Disclosure Vulnerability

IBM Cognos Business Intelligence Server is a suite of business intelligence and performance management solutions from IBM in the United States. The solution reports, analyzes, monitors, and evaluates business data.Predictive Solutions Foundation formerly known as PMQ is one of the cloud-based ass...

The Journey to Hijacking a Country’s TLD – The Hidden Risks of Domain Extensions

I will liken him to a wise man, who built his house on a rock. The rain came down, the floods came, and the winds blew, and beat on that house; and it didn’t fall, for it was founded on the rock. Everyone who hears these words of mine, and doesn’t do them will be like a foolish man, who built his...

Mozilla Network Security Services Denial of Service Vulnerability (CNVD-2017-11837)

Mozilla Network Security Services NSS is the United States Mozilla Foundation developed a library network security services library, it can provide cross-platform support for SSL, S/MIME and other Internet security standards. Mozilla Network Security Services is prone to a denial of service...

Multiple Apple Products Foundation Component Memory Corruption Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system. foundation is a framework that provides basic system services for all applications. A memory corruption vulnerability exists in the Foundation component of...