CVE-2017-6600: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351...

PT-2017-1790

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 92.21.101 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.21.101 Description A...

PT-2017-1791

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.82 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.01.82 Cisco Firepower 9300 Security Appliance versions prior to 2.01.82 Description A...

PT-2017-7807

Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This occurs when a crafted rule is mishandled in the yy get next buffer function...

Netflix Security Monkey Open Redirect Vulnerability

Netflix Security Monkey is a set of policy change and alerting tools for monitoring insecure configurations in your AWS account. Netflix Security Monkey suffers from an open redirection vulnerability. An attacker can exploit the vulnerability to redirect users to arbitrary domains with the help o...

Open redirect

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

CVE-2017-7266

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

CVE-2017-7266: URL Redirection to Untrusted Site

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

Next Browser - Fast & Private - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Next Browser - Fast & Private published at the 'play' market has multiple vulnerabilities...

IBM Rational DOORS Next Generation and Rational Requirements Composer Cross-Site Scripting Vulnerability

IBM Rational DOORS Next Generation DNG and Rational Requirements Composer are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting vulnerability exists in IBM...

CVE-2016-6055

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Referen...

CVE-2016-6055

IBM Rational DOORS Next Generation is affected by a cross-site scripting (XSS) vulnerability (CVE-2016-6055) in the Web UI. Affected products: Rational DOORS Next Generation 6.0–6.0.2 (6.0.3 not affected), 5.0–5.0.2, and Rational Requirements Composer 4.0.1–4.0.7. The issue allows embedding arbit...

PT-2017-8871

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 4.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2016-6055: Improper Neutralization of Input During Web Page Generation

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Referen...

nextdayflyers.com XSS vulnerability

Vulnerable URL: https://www.nextdayflyers.com/secure/login.html?url=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 85845 VIP website...

CVE-2016-6060

An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. IBM Reference : 1995547...

CVE-2016-6060

CVE-2016-6060 affects IBM Rational DOORS Next Generation (DRN) 4.0–6.0.2 and related 5.x/4.x components. The vulnerability allows a JazzGuest user to see project names without proper permissions (undisclosed root cause). Affected: DRN 6.0–6.0.2, DRN 5.0–5.0.2, Rational Requirements Components 4.0...

CVE-2016-6060

An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. IBM Reference : 1995547...

CVE-2016-6060: Exposure of Sensitive Information to an Unauthorized Actor

An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. IBM Reference : 1995547...

PT-2017-8874

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 4.0 through 6.0 Description An undisclosed issue in IBM Rational DOORS Next Generation could allow a JazzGuest user to see project names. Recommendations For versions 4.0 through 6.0, at the moment,...