Uscat 跨站脚本漏洞

Uscat is a forum system based on Javaex + Ssm development. A cross-site scripting vulnerability exists in uscat, which stems from an input box via statistical code that is susceptible to cross-site scripting XSS attacks...

Authorization

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

CVE-2021-34766

The CVE-2021-34766 issue affects Cisco Smart Software Manager On-Prem (SSM On-Prem) Web UI. The root cause is insufficient authorization for System User and System Operator capabilities, allowing an authenticated remote attacker to elevate privileges and perform create/read/update/delete actions ...

CVE-2021-34766

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

CVE-2020-4895

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

ssm-live.com Cross Site Scripting vulnerability OBB-1446462

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

PYSEC-2020-221

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

CVE-2020-3443

CVE-2020-3443 concerns Cisco Smart Software Manager On-Prem (SSM On-Prem). Root cause: insufficient authorization of the System Operator role capabilities, enabling an authenticated remote attacker to log in as System Operator, perform actions, and assume a higher privileged role. Impact: could g...

Security Bulletin: A vulnerability in OpenSSL affects IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2016-0800)

Summary A vulnerability, known as DROWN, exploitable in OpenSSL was disclosed on Mar 1, 2016 by openssl.org. OpenSSL 1.0.1s, used by IBM Tivoli Netcool System Service Monitors/Application Service Monitors, has addressed this vulnerability. Vulnerability Details CVE-ID: CVE-2016-0800 DESCRIPTION:...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Tivoli Netcool System Service Monitors/Application Service Monitors. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitiv...

Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2015-3144 and CVE-2015-3145)

Summary cURL libcURL vulnerabilities were disclosed on April 22, 2015 by the cURL Project. cURL is used by IBM Tivoli Netcool System Service Monitors/Application Service Monitors has addressed the applicable CVEs. Vulnerability Details CVE-ID: CVE-2015-3144 DESCRIPTION: libcurl and cURL are...

Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-8150, 2014-8151)

Summary There are multiple vulnerabilities in cURL libcURL that is used by IBM Tivoli Netcool System Service Monitors/Application Service Monitors. These issues were disclosed on January 8, 2015 by the cURL libcURL Project. Vulnerability Details CVE-ID: CVE-2014-8150 DESCRIPTION: libcURL is...

Security Bulletin: Vulnerability in SSLv3 affects IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Tivoli Netcool System Service Monitors/Application Service Monitors. Vulnerability Details CVE-ID: CVE-2014-3566 DESCRIPTION: Product could...

Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-3613 CVE-2014-3620)

Summary There are multiple vulnerabilities in cURL libcURL that is used by IBM Tivoli Netcool System Service Monitors/Application Service Monitors. These issues were disclosed on September 10, 2014 by the cURL libcURL Project. Vulnerability Details CVE-ID: CVE-2014-3613 DESCRIPTION: cURL/libcURL...

Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by the following libcURL vulnerabilities: (CVE-2014-0139, CVE-2014-0138)

Summary Security vulnerabilities have been discovered in Open Source cURL/libcURL that were reported on March 26, 2014 by the cURL/libcURL Project. Vulnerability Details CVE-ID: CVE-2014-0139 DESCRIPTION: cURL/libcURL could allow a remote attacker to bypass security restrictions, caused by an err...

Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450 and CVE-2013-6449)

Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2013-4353 DESCRIPTION: A carefully crafted invalid TLS handshake could crash OpenSSL with a NULL pointer exception. A malicious server could use this flaw to crash a connecting client. This issue...

[SECURITY] Fedora 27 Update: quagga-1.2.2-1.fc27

Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, RIPng, PIM-SSM and NHRP...

[SECURITY] Fedora 26 Update: quagga-1.2.2-1.fc26

Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, RIPng, PIM-SSM and NHRP...