1029 matches found
CVE-2017-1450
IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a maliciou...
CVE-2017-1450
CVE-2017-1450 affects IBM Emptoris Sourcing 9.5.x through 10.1.3, introducing an open-redirect vulnerability that could enable phishing by redirecting victims to a malicious site and spoofing the URL. The connected IBM security bulletin specifies the vulnerable range and provides remediation via ...
CVE-2017-1195
IBM Curam Social Program Management (SPM) is affected by CVE-2017-1195 due to a phishing/open-redirect vulnerability in the Resource Store servlet. Affected versions include 7.0.0.0–7.0.0.1 and 6.2.0.0–6.2.0.4, 6.1.1.0–6.1.1.4, 6.1.0.0–6.1.0.4, and 6.0.5.0–6.0.5.10, 6.0.4.0–6.0.4.9. An attacker c...
CVE-2017-1448
IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: Several security fixes in this release, including: 780450 High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01 787103 High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu @shhnjk on 2017-11-20 793620 High...
[SECURITY] [DSA 3926-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3926-1 [email protected] https://www.debian.org/security/ Michael Gilbert August 04, 2017 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3926-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5087 Ned Williamson discovered a way to escape the sandbox. CVE-2017-5088 Xiling Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2017-5089 Michal Bentkowski discovered a spoofing issue...
openSUSE Security Update : chromium (openSUSE-2017-854)
This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed : - CVE-2017-5091: Use after free in IndexedDB - CVE-2017-5092: Use after free in PPAPI - CVE-2017-5093: UI spoofing in Blink - CVE-2017-5094: Type confusion in extensions -...
CVE-2017-1287
IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...
CVE-2017-1223
IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...
CVE-2016-8947
IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...
CVE-2016-8953
IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...
CVE-2016-8953
IBM Emptoris Sourcing 9.5.x through 10.1.x is affected by an open redirect/phishing vulnerability (CVE-2016-8953). A remote attacker could lure a user to a crafted site to spoof the displayed URL and redirect to a malicious site, potentially harvesting sensitive information. The IBM security bull...
CVE-2017-1398
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...
CVE-2016-7831
Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier Mac App Store may allow a remote attacker to spoof the URL display via a specially crafted webpage...
CVE-2016-7831
Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier Mac App Store may allow a remote attacker to spoof the URL display via a specially crafted webpage...
CVE-2016-7831
Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier Mac App Store may allow a remote attacker to spoof the URL display via a specially crafted webpage...
CVE-2016-7831
CVE-2016-7831 affects Sleipnir for Mac (Mac 4 Black Edition 4.5.3 and earlier, and Sleipnir 4 for Mac 4.5.3 and earlier). The root cause is a flaw in the page transition that allows a remote attacker to spoof the displayed URL via a specially crafted webpage, enabling potential phishing. The refe...
CVE-2017-1159
CVE-2017-1159 affects IBM Business Process Manager (BPM) 8.0 and 8.5, where improper validation of user-supplied input enables an open redirect that can be used for phishing (spoofed URL leading to a malicious site). The IBM bulletin documents affected BPM versions (V7.5.x to V8.5.x) and provides...