Code injection

IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 duplicates the PRNG state across fork system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071...

CVE-2018-1426

IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 duplicates the PRNG state across fork system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071...

CVE-2018-1426

IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 duplicates the PRNG state across fork system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071...

CVE-2018-1426

CVE-2018-1426 affects IBM GSKit: it duplicates the PRNG state across fork() when multiple ICC instances load, risking duplicate Session IDs and key material. Documents confirm the vulnerability description and its association with GSKit in IBM products; however, a concrete, product-specific fixed...

CVE-2018-1426: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 duplicates the PRNG state across fork system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071...

Webmin < 1.230 miniserv.pl Authentication Bypass

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.230. It is, therefore, affected by a potential authentication bypass via spoofed session IDs. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108548; scriptversion"1.5";...

Design/Logic Flaw

A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names...

CVE-2017-16250

A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names...

CVE-2017-16250

A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names...

CVE-2017-16250

CVE-2017-16250 affects Mitel ST, specifically version 14.2 GA28 and earlier. The issue arises from an API function that allows enumeration of user-ids, which can be used to identify valid user ids and the corresponding user names. Public descriptions in multiple sources (NVD/CNVD) state the vulne...

Authorization

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs...

CVE-2018-1000109

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs...

CVE-2018-1000109

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs...

CVE-2018-1000109

The CVE-2018-1000109 entry documents an improper authorization vulnerability in Jenkins with the Google Play Android Publisher Plugin (versions 1.6 and earlier). The flaw resides in GooglePlayBuildStepDescriptor.java and could allow an attacker to obtain credential IDs. Affected software is the J...

PT-2018-9288

Name of the Vulnerable Software and Affected Versions: Jenkins Google Play Android Publisher Plugin versions 1.6 and earlier Description: An improper authorization issue exists that allows an attacker to obtain credential IDs. The vulnerability is located in the GooglePlayBuildStepDescriptor.java...

CVE-2018-1000109: Incorrect Authorization

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs...

PT-2018-6261

Name of the Vulnerable Software and Affected Versions: Mitel ST versions 14.2 GA28 and earlier Description: A vulnerability could allow an attacker to use the API function to enumerate through user-ids, which could be used to identify valid user-ids and associated user names. Recommendations: For...

CVE-2018-7863

This CVE-2018-7863 entry is rejected and not used.

CVE-2018-0221

A vulnerability in specific CLI commands for the Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials fo...

CVE-2018-0218

A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain information in the affected system. The vulnerability is due to improper handling of XML External Entities...