driveve.com XSS vulnerability

Open Bug Bounty ID: OBB-587887 Description| Value ---|--- Affected Website:| driveve.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-7781/CVE-2017-10176: Issue with elliptic curve addition in mixed Jacobian-affine coordinates in Firefox/Java

tl;dr Firefox and Java suffered from a moderate vulnerability affecting the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result POINTATINFINITY when it should not. Introduction Few months ago I was working on a vulnerability affecting th...

UBUNTU-CVE-2017-8932

A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by...

Carry Propagation

bouncycastle is vulnerable to carry propagation bugs. This bug caused mathematical miscalculations during static Elliptic Curve Diffie Hellman which in rare cases for it to miscalculate elliptic curve scalar multiplication. This allows a malicious user in certain cases to obtain the key...

Scientific Linux Security Update : nettle on SL7.x x86_64 (20161103)

Security Fixes : - Multiple flaws were found in the way nettle implemented elliptic curve scalar multiplication. These flaws could potentially introduce cryptographic weaknesses into nettle's functionality. CVE-2015-8803, CVE-2015-8804, CVE-2015-8805 - It was found that nettle's RSA and DSA...

Oracle Linux 7 : nettle (ELSA-2016-2582)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2582 advisory. - Use a cache-silent version of mpzpowm to prevent cache-timing attacks against RSA and DSA in shared VMs. 1364897,CVE-2016-6489 Tenable has extracted...

RedHat Update for nettle RHSA-2016:2582-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM DB2 10.1 < Fix Pack 5 / 10.5 < Fix Pack 6 Multiple Vulnerabilities

Binary data 9199.prm...

Mageia: Security Advisory (MGASA-2016-0061)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the IBM DB2 database management system allows a hacker to trigger a service failure.

The vulnerability of the IBM DB2 database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by using a scalar function in an SQL query...

The vulnerability of the IBM DB2 database management system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the scalar-function implementation in the IBM DB2 database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures or execute arbitrary code...

CVE-2015-1935

The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

CVE-2015-1935

The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

IBM DB2 Scalar Denial of Service Vulnerability

IBM DB2 is a set of relational database management system developed by IBM in the United States, and its main operating environments are UNIX including IBM's own AIX, Linux, IBM i formerly known as OS/400, z/OS, and Windows server versions. IBM DB2 has a security vulnerability that allows...

CVE-2014-2959

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 641G.GS103 and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 646G.GS002 allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter...

Code injection

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 641G.GS103 and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 646G.GS002 allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter...

CVE-2014-2959

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 641G.GS103 and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 646G.GS002 allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter...

CVE-2014-2959

The CVE-2014-2959 issue affects Dell ML6000 and Quantum Scalar i500 tape libraries. The remote pre-authentication vulnerability stems from logViewer.htm, where a pathname parameter is used directly in shell commands, allowing command execution via metacharacters. Affected firmwares are Dell i8.2....

Dell ML6000 and Quantum Scalar i500 tape backup system command injection vulnerability

Overview Dell ML6000 and Quantum Scalar i500 tape backup system contain a command injection vulnerability. Description CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'Dell's and Quantum's advisories state the following: The tape library's remote use...

Multiple Vendor Products Security Vulnerabilities

Quantum Scalar i500, Dell ML6000, and IBM TS3310 are prone to following vulnerabilities: 1. An information disclosure vulnerability 2. A cross-site scripting vulnerability 3. A cross-site request-forgery vulnerability 4. A security bypass vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG So...