624 matches found
CVE-2018-1600
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745...
IBM BigFix Platform Cross-Site Request Forgery Vulnerability
IBM BigFix platform is a dynamic set of IBM's integrated messaging content-driven and management system multi-technology platform. A cross-site request forgery vulnerability exists in the BigFix Relay Diagnostic page in IBM BigFix Platform versions 9.2 and 9.5. A remote attacker could exploit the...
CVE-2018-1479
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 140761...
CVE-2018-1475
IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 140756...
Oracle PeopleSoft Enterprise HCM Component Remote Vulnerability
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the human resource management components. A security...
CVE-2018-2878
Vulnerability in the PeopleSoft Enterprise HCM Shared Components component of Oracle PeopleSoft Products subcomponent: Notepad. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2018-2752
Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...
CVE-2018-2410
SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting XSS vulnerability...
tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...
tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...
tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...
tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...
tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...
tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...
tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...
tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...
tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint...
tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser
The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...