CVE-2018-1494

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1494

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1494

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1494

IBM DOORS Next Generation (DNG/RRC) versions 5.0–5.0.2 and 6.0–6.0.5 are affected by a cross-site scripting (XSS) flaw in the Web UI that can lead to credentials disclosure within a trusted session. Affects Rational DOORS Next Generation 5.0.2 and 6.0–6.0.5. Remediation: upgrade to 5.0.2 iFix026 ...

gpmf-parser buffer overflow vulnerability (CNVD-2018-13555)

gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A buffer overflow vulnerability exists in the 'GPMFNext' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to cause ...

gpmf-parser heap overflow vulnerability

gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A heap overflow vulnerability exists in the 'GPMFNext' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to cause a...

IBM Rational DOORS Cross-Site Scripting Vulnerability (CNVD-2018-13865)

IBM DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM in the United States. The software provides a single platform for global team collaboration to manage requirements more efficiently and share unified user, server and...

Cisco Adaptive Security Appliance Path Traversal

''' Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 A security vulnerability in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques. Vulnerable Products This vulnerability affects Cisco ASA...

Cisco Adaptive Security Appliance - Path Traversal

''' Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 A security vulnerability in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques. Vulnerable Products This vulnerability affects Cisco ASA...

Firefox Monitor tool informs users if they have been hacked

By Carolina The Firefox Monitor will be launched next week - The tool This is a post from HackRead.com Read the original post: Firefox Monitor tool informs users if they have been hacked...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141415...

CVE-2018-1507

IBM DOORS Next Generation DNG/RRC 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141415...

CVE-2018-1507

IBM DOORS Next Generation (DNG/RRC) 6.0.5 is vulnerable to cross-site scripting in the Web UI, allowing embedding of arbitrary JavaScript code and potentially exposing credentials within a trusted session. The issue is documented as CVE-2018-1507. Affected product: Rational DOORS Next Generation ...

CVE-2018-1507

IBM DOORS Next Generation DNG/RRC 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141415...

CVE-2018-0302

A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to incorrect input validation in the CLI parser subsystem. An attacker could...

CVE-2018-0302

A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to incorrect input validation in the CLI parser subsystem. An attacker could...

CVE-2018-0298

A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to incorrect input validation in the web UI. An attacker could exploit this vulnerabili...

Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance Path Traversal Vulnerability

A vulnerability in the process of uploading new application images to the Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance could allow an authenticated, remote attacker using path traversal techniques to create or overwrite arbitrary files on an...

PT-2018-3432

Name of the Vulnerable Software and Affected Versions: tcpdump versions prior to 4.9.3 Description: The issue is related to a buffer overflow in the get next file function in tcpdump.c, which can be exploited by a remote attacker to gain unauthorized access to information, cause a denial of...