Security Bulletin: Improper Authentication vulnerability affects IBM Security Guardium (CVE-2017-1264)

Summary IBM Security Guardium does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2017-1264 DESCRIPTION: IBM...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Identity Governance (CVE-2016-8610 CVE-2017-3731)

Summary There are multiple security vulnerabilities in various components used by IBM Security Identity Governance and Intelligence regarding OpenSSL Vulnerability Details CVEID: CVE-2016-8610 DESCRIPTION: The SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processi...

Security Bulletin: IBM QRadar Incident Forensics is vulnerable to overly permissive CORS access policies (CVE-2016-9725)

Summary IBM QRadar Incident Forensics is affected by Cross-Origin Resource Sharing CORS which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. Vulnerability Details CVEID: CVE-2016-9725 DESCRIPTION: IBM QRadar Incident Forensics...

Security Bulletin: IBM QRadar SIEM is vulnerable to a denial of service (CVE-2016-9740)

Summary IBM QRadar SIEM does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. Vulnerability Details CVEID: CVE-2016-9740 DESCRIPTION: IBM QRadar could allow a remote attacker to...

Security Bulletin: Vulnerability in Apache POI affects IBM Emptoris Services Procurement (CVE-2017-5644)

Summary Open Source Apache Poi vulnerability affects IBM Emptoris Services Procurement Vulnerability Details CVE-ID: CVE-2017-5644 Description: Apache POI is vulnerable to a denial of service, cause by an XML External Entity Injection XXE error when processing XML data. By using a specially-craft...

Security Bulletin: IBM® DB2® LUW is affected by the JSON-C vulnerability (CVE-2013-6371)

Summary IBM® DB2® LUW is affected by a denial of service vulnerability in JavaScript Object Notation JSON-C, caused by an error in the hash function during string parsing. A remote, unauthorized user could exploit this vulnerability to consume all available CPU resources. Vulnerability Details CV...

Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache POI vulnerabilities (CVE-2017-5644, CVE-2016-5000, CVE-2014-3574)

Summary IBM OpenPages GRC Platform has addressed potential security exposure due to multiple vulnerabilities in Apache POI library. Vulnerability Details CVE-ID: CVE-2017-5644 Description: Apache POI is vulnerable to a denial of service, cause by an XML External Entity Injection XXE error when...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Aspera Orchestrator, IBM Aspera Virtual Catcher, IBM Aspera Faspex, IBM Aspera Shares (CVE-2016-6304, CVE-2016-2177, ...)

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM Aspera Orchestrator, IBM Aspera Virtual Catcher, IBM Aspera Faspex, IBM Aspera Shares has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6302 DESCRIPTIO...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Image Construction and Composition Tool.

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM Image Construction and Composition Tool. IBM Image Construction and Composition Tool has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6302 DESCRIPTION...

Security Bulletin: A vulnerability in XML processing affects IBM DataPower Gateways (CVE-2015-1819)

Summary IBM DataPower Gateways has addressed a vulnerability in parsing certain XML files that could cause a denial of service. Vulnerability Details CVEID: CVE-2015-1819 DESCRIPTION: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error in the xmlreade...

Security Bulletin: IBM MQ Light - Improper handling of authentication credentials (CVE-2015-1958)

Summary IBM MQ Light is vulnerable to a denial of service, caused by an improper handling of authentication credentials. By constructing particular byte sequences a remote attacker could cause consumption of all available disk resources. Vulnerability Details CVEID: CVE-2015-1958 DESCRIPTION: IBM...

Security Bulletin: IBM MQ Light - Improper handling of authentication credentials (CVE-2015-1956)

Summary IBM MQ Light is vulnerable to a denial of service, caused by an improper handling of authentication credentials. By constructing particular byte sequences a remote attacker could cause consumption of all available disk resources. Vulnerability Details CVEID: CVE-2015-1956 DESCRIPTION: IBM...

Unspecified vulnerability in node-bsdiff-android

node-bsdiff-android is a differential upgrade tool for Android applications. A security vulnerability exists in node-bsdiff-android that originates when the program downloads binary resources over the HTTP protocol. An attacker can exploit the vulnerability to modify or read the downloaded...

js-given code execution vulnerability

js-given is a developer-oriented , BDD for JavaScript Behavior Driven Development, Behavior Driven Development tools . A security vulnerability exists in js-given that originates when the program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability ...

sfml Remote Code Execution Vulnerability

sfml is a set of multimedia development libraries that provide simple interfaces to various components of a PC, simplifying the development of multimedia applications. A security vulnerability exists in sfml that originates when a program downloads binary resources over the HTTP protocol. An...

prebuild-lwip Remote Code Execution Vulnerability

prebuild-lwip is a lightweight image processor based on NodeJS. A security vulnerability exists in prebuild-lwip that originates when the program downloads binary resources over the HTTP protocol. An attacker can use this vulnerability to modify or read the downloaded resources and potentially...

Node.js: Your page has 2 blocking CSS resources. This causes a delay in rendering your page.

This report was not deemed to be a security vulnerability and the reporter was asked to open an issue upstream to fix publicly...

LuckyMouse hits national data center to organize country-level waterholing campaign

What happened? In March 2018 we detected an ongoing campaign targeting a national data center in the Central Asia that we believe has been active since autumn 2017. The choice of target made this campaign especially significant – it meant the attackers gained access to a wide range of government...

Windows Code Integrity Module Denial of Service Vulnerability

A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing. An attacker who successfully exploited the vulnerability could cause a system to stop responding. Note that the denial of service condition would not allow an attacker to execute code or t...

CVE-2018-5137

A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. This script does this by using a maliciously crafted path string to reference the resources. Note: this vulnerability does not affect WebExtensions. This vulnerability affects...