The vulnerability of the Windows Azure Pack cloud platform arises from the lack of measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks with elevated privileges.

The vulnerability of the Windows Azure Pack cloud platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli Business Service Manager

Summary IBM WebSphere Application Server is shipped as a component of Tivoli Business Service Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the Security Bulletin:...

Lifecycle Information for HDX RealTime Optimization Pack

The HDX RealTime Optimization Pack RTOP for Skype® for Business is a feature of Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop, Advanced formerly Enterprise and Premium formerly Platinum editions. HDX RTOP provides optimized delivery of the Microsoft Skype for Business 2015, 2016...

Horner Automation Cscape Input Validation Vulnerability

Horner Automation Cscape is a set of programming software for industrial control system application development from Horner Automation. An input validation vulnerability exists in Horner Automation Cscape 9.80.75.3 SP3 and prior versions, which arises from a failure of the program to validate use...

Security Bulletin: Asset Analyzer (RAA) is affected by an Apache CXF vulnerability

Summary Rational Asset Analyzer RAA has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-8039 DESCRIPTION: Apache CXF could allow a remote attacker to conduct a man-in-the-middle attack. The TLS hostname verification does not work correctly with com.sun.net.ssl...

Security Bulletin: IBM API Connect is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework (CVE-2018-1784)

Summary IBM API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2018-1784 DESCRIPTION: IBM API Connect is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. CVSS Base Score: 7.1 CVSS Temporal Score: See for the current score CVSS...

The vulnerability of the `pack` function in the Perl interpreter allows attackers to cause service failures, gain access to confidential data, or compromise its integrity.

The vulnerability of the pack function in the Perl interpreter is related to an error that causes overflow in the dynamic memory when writing data to it during operations involving a large number of elements within the pack function. Exploiting this vulnerability allows a remote attacker to execu...

Security Bulletin: Multiple vulnerabilities in IBM Runtime Environment Java affect Rational Build Forge (CVE-2018-1656; CVE-2018-2973; CVE-2018-12539)

Summary There are multiple vulnerabilities in IBM® Runtime Environment that is bundled along with IBM Rational Build Forge. Vulnerability Details CVEID: CVE-2018-1656 DESCRIPTION: The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java DTFJ IBM SDK, Java Technology Edition 6.0 ,...

Microsoft Team Foundation Server 2010 Service Pack 1

Describes the Microsoft Team Foundation Server 2010 Service Pack 1 new features and issues that are fixed by the service pack.SummaryThis article describes information about Team Foundation Server TFS 2010 Service Pack 1 SP1. The largest component of the TFS 2010 SP1 is the set of core product...

Security Bulletin: IBM DataPower Gateway is affected by a CSRF vulnerability (CVE-2018-1661)

Summary IBM DataPower Gateway has addressed the following vulnerability: CVE-2018-1661 Vulnerability Details CVEID: CVE-2018-1661 DESCRIPTION: IBM DataPower Gateways is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted...

Security Bulletin: IBM DataPower Gateway is affected by a Denial of Service vulnerability (CVE-2018-1677)

Summary IBM DataPower Gateway has addressed the following vulnerability: CVE-2018-1677 Vulnerability Details CVEID: CVE-2018-1677 DESCRIPTION: IBM DataPower Gateways and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker...

Security Bulletin: IBM® DB2® contains a denial of service vulnerability in scalar functions (CVE-2018-1977)

Summary IBM DB2 contains a denial of service vulnerability on Linux System z® platform. A remote, authenticated DB2 user could exploit this vulnerability by executing a specially-crafted SQL statement with the TRUNCATE scalar functions. This could result in a DB2 server crash; if so, the server...

CVE-2018-17952

Cross site scripting vulnerability in eDirectory prior to 9.1 SP2...

CVE-2018-17949

Cross site scripting vulnerability in iManager prior to 3.1 SP2...

CVE-2018-8652

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

CVE-2018-8652

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

Cross site scripting

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

CVE-2018-8652

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

CVE-2018-8652

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

Microsoft Excel Viewer 2007 Service Pack 3 Information Disclosure Vulnerability (KB4461566)

This host is missing an important security update according to Microsoft KB4461566 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...