106 matches found
CVE-2014-2228
The CVE-2014-2228 issue affects the XStream extension in HP Fortify SCA prior to version 2.2 RC3, where unsafe deserialization of XML messages allows remote attackers to execute arbitrary code. The affected component is the XStream extension, with the root cause described as unsafe XML deserializ...
CVE-2014-2228
The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages...
CVE-2014-2228: Improper Restriction of Recursive Entity References in DTDs
The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages...
PT-2020-7623
Name of the Vulnerable Software and Affected Versions HP Fortify SCA versions prior to 2.2 RC3 Description The issue allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages. This is related to the XStream extension in HP Fortify SCA. Recommendations For versio...
CVE-2017-1198
CVE-2017-1198 affects IBM BigFix Compliance 1.7–1.9.91 (TEMA SUAv1 SCA SCM). The underlying issue is that sensitive information is stored in URL parameters, enabling potential information disclosure if URLs are exposed in server logs, referrer headers, or browser history. The NVD entry notes expl...
CVE-2017-1202
CVE-2017-1202 affects IBM BigFix Compliance 1.7–1.9.91 (TEMA SUAv1 SCA SCM). The vulnerability is HTML injection that could allow a remote attacker to inject HTML code, which would execute in the victim’s browser within the hosting site’s security context when viewed. No exploitation details or p...
CVE-2018-14924: Improper Neutralization of Input During Web Page Generation
Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" aka user fullname field...
PT-2018-12802
Name of the Vulnerable Software and Affected Versions Matera Banco version 1.0.0 Description The issue concerns multiple stored XSS vulnerabilities. Specifically, the "Nome Completo" aka user fullname field in the /sca/privilegio/consultarUsuario.jsf endpoint is vulnerable. Recommendations For...
Qualys Cloud Platform (VM, SCA, PC) 8.14 New Features
This new release of the Qualys Cloud Platform VM, SCA, PC, version 8.14, includes several new feature improvements across the apps such as Wallix AdminBastion support, EC2 scan improvements, VM reporting improvements, ESX/ESXi PC support for vCenter, PC STIG Report, and expanded technology suppor...
Security Bulletin: Incorrect SSL protocol variant in SCA HTTP binding affecting WebSphere Enterprise Service Bus, WebSphere Process Server and IBM Business Process Manager Advanced (CVE-2014-6176)
Summary The HTTP import binding in an SCA module can be configured with a reference to a SSL configuration that exists on the application server. The HTTP binding uses always the SSLv3 protocol variant regardless of the SSL protocol setting in the referenced SSL configuration. Vulnerability Detai...
New multiOverflow Bug Identified in Multiple ERC20 Smart Contracts (CVE-2018-10706)
Our vulnerability-scanning system at PeckShield has so far discovered several dangerous smart contract vulnerabilities batchOverflow, proxyOverflow, transferFlaw, ownerAnyone. Some of them could be used by attackers to generate tokens out of nowhere while others can be used to steal tokens from...
CVE-2018-10706
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...
PT-2018-10057
Name of the Vulnerable Software and Affected Versions Social Chain SCA affected versions not specified Description The issue is related to an integer overflow in the transferMulti function of a smart contract implementation, allowing attackers to increase digital assets without authorization...
CVE-2018-10706: Integer Overflow or Wraparound
An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...
Qualys Cloud Platform (VM, PC) 8.13 New Features
This new release of the Qualys Cloud Platform VM, PC, version 8.13, includes several new feature improvements across the apps such as the ability to test authentication records, as well as improvements to UDC’s and report options in Qualys Policy Compliance. Feature Highlights Qualys Cloud Platfo...
CVE-2017-1196
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 is affected by a weak default password policy (CVE-2017-1196). The issue, documented across multiple sources (NVD/Nessus/CNVD), states that the product does not require strong passwords by default, enabling an attacker to compromise user accounts ...
CVE-2017-1196: Weak Password Requirements
IBM BigFix Compliance TEMA SUAv1 SCA SCM 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671...
PT-2017-12321
Name of the Vulnerable Software and Affected Versions IBM BigFix Compliance TEMA SUAv1 SCA SCM version 1.9.70 Description The issue makes it easier for attackers to compromise user accounts due to a lack of strong password requirements by default. Recommendations For IBM BigFix Compliance TEMA...
Code injection
IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL setting in the SCA module HTTP import binding and unconditionally select the SSLv3 protocol, which...
PT-2014-7085
Name of the Vulnerable Software and Affected Versions IBM WebSphere Process Server version 7.0 IBM WebSphere Enterprise Service Bus version 7.0 IBM Business Process Manager Advanced versions 7.5.x through 7.5.1.2 IBM Business Process Manager Advanced versions 8.0.x through 8.0.1.3 IBM Business...