CVE-2016-6028

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view...

CVE-2016-6028

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view...

CVE-2016-6028

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view...

SUSE-SU-2017:0346-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Oracle Critical Patch Update of January 2017 bsc1020905 Upgrade to version jdk8u121 icedtea 3.3.0: - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution...

Update Rollup 11 for System Center 2012 R2 Data Protection Manager

Update Rollup 11 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 11 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note We recommend that...

Update Rollup 10 for System Center 2012 R2 Data Protection Manager

Update Rollup 10 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 10 for Microsoft System Center 2012 R2 Data Protection Manager. Additionally, this article contains the installation instructions for this update. Note...

Update Rollup 8 for System Center 2012 Data Protection Manager SP1

Update Rollup 8 for System Center 2012 Data Protection Manager SP1 This article describes the issues that are fixed in Update Rollup 8 for Microsoft System Center 2012 Data Protection Manager DPM Service Pack 1 SP1. Additionally, this article contains the installation instructions for Update Roll...

trinketsandtrash.org XSS vulnerability

Vulnerable URL: https://trinketsandtrash.org/detail.php?itemnumber=213662'"--!...

net-qp.com XSS vulnerability

Vulnerable URL: https://www.net-qp.com/item/detail.php?Item=2710809=23=='"--!...

heartlandjewelry.net XSS vulnerability

Vulnerable URL: http://heartlandjewelry.net/item-large.asp?pic='"--!confirmOPENBUGBOUNTY...

CVE-2016-7462

The Suite REST API in VMware vRealize Operations aka vROps 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization...

Mail.ru: [allods.mail.ru] Cross-Site Request Forgery (Add-Item)

Hi, I found that there is no anti-csrf while adding an item for '/media.php' in allods.mail.ru, from 'https://allods.mail.ru/media.php?do=additem&section=2' since there was no anti-csrf token, there was still an extra layer of security for csrf which I had to bypass! More Details: The upload...

MariaDB Server 10.2.x < 10.2.2 Multiple DoS

Binary data 9689.prm...

zeemaps.com XSS vulnerability

Vulnerable URL: http://www.zeemaps.com/view?group=1=...

IBM WebSphere Portal Security Bypass Vulnerability

IBM WebSphere Portal is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 23 Update: kf5-kitemmodels-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with item models...

[SECURITY] Fedora 23 Update: kf5-kitemviews-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with item views...

[SECURITY] Fedora 24 Update: kf5-kitemviews-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with item views...

[SECURITY] Fedora 24 Update: kf5-kitemmodels-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with item models...

TeamPass SQL Injection Vulnerability (CNVD-2016-04930)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. TeamPass has a SQL injection vulnerability in sources/items.series.php. In a "sendemail" request, when the condition "$POST'cat' == "sharethisitem"" is successful, the POST parameter "id" is unescaped, which can lead to SQL...