CVE-2018-11364

CVE-2018-11364 affects ReadStat 0.1.1: the function sav_parse_machine_integer_info_record in spss/readstat_sav_read.c (libreadstat.a) has a memory leak linked to an iconv_open call. This vulnerability is documented across multiple feeds (NVD, OSV, Ubuntu, Debian, Nessus) with the same core descri...

Security feature bypass

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

CVE-2013-6739

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

CVE-2013-6739

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

CVE-2013-6739

Summary: CVE-2013-6739 affects IBM SPSS Modeler prior to 16 on UNIX, where SSO tokens can bypass access restrictions. The IBM Security Bulletin (CVE-2013-6739) confirms the UNIX server accepts an SSO token to a session, potentially enabling authenticated access. Affected versions include 14–15.0 ...

PT-2018-4107

Name of the Vulnerable Software and Affected Versions IBM SPSS Modeler versions prior to 16 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved via an SSO token. Recommendations For versions prior to 16, update to version 16 or later to...

CVE-2013-6739: Improper Access Control

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

Citrix App Layering: Recipe IBM SPSS 21

Licensing Considerations The following information should be discussed with your IBM licensing contacts: Concurrent user network licensing for IBM SPSS packages. Usage of SPSS in a virtualized environment requires a licensing “addendum” and further cost. A physical server with current Java versio...

Null pointer dereference

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

DEBIAN-CVE-2017-10792

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-10791

There is an Integer overflow in the hashint function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

CVE-2017-10792

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

CVE-2017-10791

There is an Integer overflow in the hashint function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-10792

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

CVE-2017-10792

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

CVE-2017-10792

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

CVE-2017-10791: Integer Overflow or Wraparound

There is an Integer overflow in the hashint function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

PT-2017-8705

Name of the Vulnerable Software and Affected Versions Symantec Advanced Threat Protection: Network ATP affected versions not specified Symantec Email Security.Cloud affected versions not specified Symantec Data Center Security: Server affected versions not specified Symantec Endpoint Protection S...

CVE-2016-3644

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-2209

Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac;...