CVE-2020-4679

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186424...

Cross site scripting

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186427...

Cross site scripting

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186426...

CVE-2020-4680

CVE-2020-4680 refers to IBM Security Guardium 11.2 being vulnerable to cross-site scripting in the Web UI, enabling a user to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM security bulletin confirms this family of XSS vulnerabilities and notes a...

CVE-2020-4681

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186427...

CVE-2020-4679

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186424...

CVE-2020-4741

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...

EulerOS 2.0 SP9 : trousers (EulerOS-SA-2020-2172)

According to the versions of the trousers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - TrouSerS is an implementation of the Trusted Computing Group's Software Stack TSS specification. You can use TrouSerS to write applications tha...

Open redirect

Next.js versions =9.5.0 and 9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. In general, this redirect does not directly harm users although can allow for phishing attacks by...

Fedora 33 : mumble (2020-f869e01557)

Mumble 1.3.2. === Client - Fixed: Overlay not starting 4282 Server - Fixed: keychain-error on macOS for custom certificates 4345 Known issues - Overlay blocked by BattleEye. A request to whitelist it has been made. - Overlay blocked by CS:GO Trusted Mode Note that Tenable Network Security has...

The vulnerability of the Intel Converged Security and Manageability Engine technology and the Intel Trusted Execution Engine software lies in insufficient input data validation, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Intel Converged Security and Manageability Engine technology and the Intel Trusted Execution Engine TXE software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access...

The vulnerability relates to the implementation of the Intel Converged Security and Manageability Engine, the microsoftware of the Intel Server Platform Services, and the Intel Trusted Execution Engine. It stems from a numerical overflow in data structures, allowing an attacker to trigger a service failure.

The vulnerability of the Intel Converged Security and Manageability Engine, the microsoftware of the Intel Server Platform Services, and the Intel Trusted Execution Engine is related to a count-based overflow in data structures. Exploiting this vulnerability can allow an attacker to trigger a...

Cross site scripting

IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131...

CVE-2019-4725

IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131...

[SECURITY] Fedora 32 Update: tpm2-tss-2.4.3-1.fc32

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...

Fedora 32 : mumble (2020-8372f6bae4)

Mumble 1.3.2. === Client - Fixed: Overlay not starting 4282 Server - Fixed: keychain-error on macOS for custom certificates 4345 Known issues - Overlay blocked by BattleEye. A request to whitelist it has been made. - Overlay blocked by CS:GO Trusted Mode Note that Tenable Network Security has...

Address Bar Spoofing

WebKitGTK+ is vulnerable to address bar spoofing. An attacker could cause malicious web content to be displayed as if for a trusted URI...

The vulnerability of Intel Trusted Execution Engine’s microprogramming software, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of Intel Trusted Execution Engine TXE microprogramming software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

USN-4551-1 squid3 vulnerabilities

Alex Rousskov and Amit Klein discovered that Squid incorrectly handled certain Content-Length headers. A remote attacker could possibly use this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. CVE-2020-15049 Amit Klein discovered that Squid incorrectly validated...

[SECURITY] Fedora 33 Update: tpm2-tss-3.0.1-1.fc33

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...