CVE-2015-0113: Exposure of Sensitive Information to an Unauthorized Actor

The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next...

RSA Conference Chris Hoff Reuben Paul Keynote

SAN FRANCISCO – When it comes to the future development of secure software, there’s really only one “next generation” that matters. That’s why today when the covers were pulled back on a seven-foot-tall server rack wheeled out on stage during Chris Hoff’s RSA Conference keynote, those in the...

PT-2015-5833

Name of the Vulnerable Software and Affected Versions ASUS RT-G32 routers versions 2.0.2.6 through 2.0.3.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. The parameters next page, group id, action script, or flag in the "start...

IBM Rational DOORS Next Generation and Rational Requirements Composer Denial of Service Vulnerabilities

IBM Rational DOORS Next Generation and Rational Requirements Composer are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A security vulnerability exists in the XML parser of IBM...

CVE-2015-0132

The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a deni...

CVE-2014-6131

IBM Rational Jazz Team Server JTS, as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x...

Code injection

The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a deni...

CVE-2015-0125

Cross-site scripting XSS vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 4.x before 4.0.7 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-0125

CVE-2015-0125 describes an XSS vulnerability in IBM Rational DOORS Next Generation (4.x < 4.0.7 iFix3; 5.x < 5.0.2) and Rational Requirements Composer (4.x

CVE-2014-6129

IBM Rational Jazz Team Server JTS, as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x...

PT-2015-4486

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 4.0.0 through 4.0.7 before iFix3 IBM Rational DOORS Next Generation versions 5.0.0 through 5.0.2 IBM Rational Requirements Composer versions 4.0.0 through 4.0.7 before iFix3 Description A cross-site...

CVE-2015-0132: Undefined Security Weakness

The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a deni...

CVE-2015-0125: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 4.x before 4.0.7 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2015-4493

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 4.x before 4.0.7 iFix3 IBM Rational DOORS Next Generation versions 5.x before 5.0.2 IBM Rational Requirements Composer versions 2.x and 3.x before 3.0.1.6 iFix5 IBM Rational Requirements Composer...

PT-2015-3815

Name of the Vulnerable Software and Affected Versions IBM Rational Jazz Team Server JTS versions 3.x through 4.0.7 before iFix4 IBM Rational Jazz Team Server JTS versions 5.x before 5.0.2 iFix2 Rational Collaborative Lifecycle Management versions 3.x through 4.0.7 before iFix4 Rational...

CVE-2014-6129: Undefined Security Weakness

IBM Rational Jazz Team Server JTS, as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x...

PT-2015-3816

Name of the Vulnerable Software and Affected Versions IBM Rational Jazz Team Server JTS versions 3.x through 4.0.7 before iFix4 IBM Rational Jazz Team Server JTS versions 5.x before 5.0.2 iFix2 Rational Collaborative Lifecycle Management versions 3.x through 4.0.7 before iFix4 Rational...

Fortimail 5.2.1 Cross Site Scripting

I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities in Fortimail version 5.2.1 II. BACKGROUND ------------------------- Fortinet’s industry-leading, Network Security Platforms deliver Next Generation Firewall NGFW security with exceptional throughput, ultra low latency, and...

Security feature bypass

The CryptProtectMemory function in cng.sys aka the Cryptography Next Generation driver in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gol...

PT-2015-4392

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold an...