CVE-2018-1529: Improper Neutralization of Input During Web Page Generation

IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

PT-2018-12953

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 5.0 through 5.0.2 IBM Rational DOORS Next Generation versions 6.0 through 6.0.5 IBM Rational Requirements Composer versions 5.0 through 5.0.2 Description This issue allows users to embed arbitrary...

PT-2018-2719

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 2.3.0 Description The issue is related to division-by-zero errors in the pi next pcrl, pi next cprl, and pi next rpcl functions in the lib/openjp3d/pi.c file of the OpenJPEG library. This can be exploited by a remote...

CVE-2018-1494

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1494

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1494

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1494

IBM DOORS Next Generation (DNG/RRC) versions 5.0–5.0.2 and 6.0–6.0.5 are affected by a cross-site scripting (XSS) flaw in the Web UI that can lead to credentials disclosure within a trusted session. Affects Rational DOORS Next Generation 5.0.2 and 6.0–6.0.5. Remediation: upgrade to 5.0.2 iFix026 ...

PT-2018-12815

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 5.0 through 5.0.2 IBM DOORS Next Generation DNG/RRC versions 6.0 through 6.0.5 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality...

CVE-2018-1494: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

gpmf-parser buffer overflow vulnerability (CNVD-2018-13555)

gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A buffer overflow vulnerability exists in the 'GPMFNext' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to cause ...

gpmf-parser heap overflow vulnerability

gpmf-parser is a parser for gpmf format files used to store high-frequency periodic sensor data in video files such as MP4. A heap overflow vulnerability exists in the 'GPMFNext' function of the GPMFparser.c file in gpmf-parser version 1.1.2. An attacker can exploit this vulnerability to cause a...

PT-2018-11535

Name of the Vulnerable Software and Affected Versions gpmf-parser version 1.1.2 Description An issue was discovered in the function GPMF Next, related to certain checks for GPMF KEY END and nest level conditional on a buffer size longs check, which leads to a heap-based buffer over-read in GPMF...

PT-2018-11534

Name of the Vulnerable Software and Affected Versions gpmf-parser version 1.1.2 Description An issue was discovered in the gpmf-parser, where there is a heap-based buffer over-read in the GPMF parser.c file, specifically in the function GPMF Next. This issue is related to certain checks for a...

IBM Rational DOORS Cross-Site Scripting Vulnerability (CNVD-2018-13865)

IBM DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM in the United States. The software provides a single platform for global team collaboration to manage requirements more efficiently and share unified user, server and...

PT-2018-11533

Name of the Vulnerable Software and Affected Versions gpmf-parser version 1.1.2 Description An issue was discovered in the function GPMF Next in GPMF parser.c, related to certain checks for GPMF KEY END and nest level, which can lead to a heap-based buffer over-read. This issue is not conditional...

Cisco Adaptive Security Appliance - Path Traversal

''' Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 A security vulnerability in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques. Vulnerable Products This vulnerability affects Cisco ASA...

Cisco Adaptive Security Appliance Path Traversal

''' Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 A security vulnerability in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques. Vulnerable Products This vulnerability affects Cisco ASA...

Firefox Monitor tool informs users if they have been hacked

By Carolina The Firefox Monitor will be launched next week - The tool This is a post from HackRead.com Read the original post: Firefox Monitor tool informs users if they have been hacked...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141415...