CVE-2018-18975

An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communications between the app and Ascensia backend servers because of a weak certificate-pinning implementation, leading to disclosure of medical information...

The vulnerabilities of the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in the OpenJPEG image encoding/decoding library allow a malicious actor to cause a service failure.

The vulnerability of the functions pinextpcrl, pinextcprl, and pinextrpcl in the lib/openjp3d/pi.c library, which is used for image encoding/decoding in OpenJPEG, is related to a bug that causes division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2019-11389

An issue was discovered in OWASP ModSecurity Core Rule Set CRS through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with next at the beginning and nested repetition operators. NOTE: the...

Can You Handle the Cyber Threats Coming in 2019?

I never thought I’d long for the days when Pikachu and Anna Kournikova worms were thriving. But back then, cyber attacks caused chaos, but not significant damage. Fast forward to 2019 and the threat landscape has changed. Now attackers are out to do significant damage to your company. This damage...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2019-09071)

IBM Rational DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM, USA. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...

The vulnerability of the `proceed_next_node` function in the GNU C library, which relates to the possibility of reading buffers outside the memory boundary, allows attackers to trigger a service failure.

The vulnerability in the proceednextnode function in posix/regexec.c of the GNU C library is related to the ability to read buffers outside the memory boundary, caused by comparing with a regular expression that does not depend on registers. Exploiting this vulnerability can allow an attacker to...

CVE-2018-1731

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1913

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1731

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1913

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1731

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1913

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1731

CVE-2018-1731 affects IBM DOORS Next Generation (DNG/RRC) 5.0–5.0.3 and 6.0–6.0.6. The issue is a cross-site scripting flaw in the Web UI that can cause arbitrary JavaScript execution, potentially leading to credentials disclosure within a trusted session. Affected versions are explicitly listed ...

CVE-2018-1913

Summary: CVE-2018-1913 affects IBM DOORS Next Generation (DNG/RRC) 5.0–5.0.3 and 6.0–6.0.6, with a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript and potentially expose credentials within a trusted session. The root cause involves insufficient input...

PT-2019-10275 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.1 is not mentioned, however, OpenJPEG through 2.3.0 Description: The issue is related to out-of-bounds accesses in certain functions, specifically pi next lrcp, pi next rlcp, pi next rpcl, pi next pcrl, and pi...

Visit Wallarm at Google Cloud Next

April 9–11, San Francisco, CA We are excited to join the community of the GCP professionals and demonstrate Wallarm web and API protection solutions custom-built for Google Cloud-powered applications. A certified GCP-partner, Wallarm delivers AI-powered security solution built to help your busine...

Partner Perspectives: Stay Proactive with Automated Threat Blocking from Carbon Black and IntSights

Alon Yotvat is a Senior Solutions Architect for IntSights. Carbon Black and IntSights have joined forces to combine next-gen endpoint security solutions with powerful external threat intelligence. This potent integration of cybersecurity technologies gives enterprises the protection they need to...

CVE-2019-1611

A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI...