CVE-2017-1449

IBM Emptoris Sourcing (9.5.x–10.1.x; also related to Emptoris Contract Management) is affected by CVE-2017-1449 due to an open redirect vulnerability that could be exploited by a remote attacker to spoof the URL and lead a user to a malicious site, enabling phishing and potential sensitive-data e...

CVE-2017-1449

IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a maliciou...

CVE-2017-1450

IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a maliciou...

CVE-2017-1450

CVE-2017-1450 affects IBM Emptoris Sourcing 9.5.x through 10.1.3, introducing an open-redirect vulnerability that could enable phishing by redirecting victims to a malicious site and spoofing the URL. The connected IBM security bulletin specifies the vulnerable range and provides remediation via ...

CVE-2017-1195

IBM Curam Social Program Management (SPM) is affected by CVE-2017-1195 due to a phishing/open-redirect vulnerability in the Resource Store servlet. Affected versions include 7.0.0.0–7.0.0.1 and 6.2.0.0–6.2.0.4, 6.1.1.0–6.1.1.4, 6.1.0.0–6.1.0.4, and 6.0.5.0–6.0.5.10, 6.0.4.0–6.0.4.9. An attacker c...

CVE-2017-1448

IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: Several security fixes in this release, including: 780450 High CVE-2018-6031: Use after free in PDFium. Reported by Anonymous on 2017-11-01 787103 High CVE-2018-6032: Same origin bypass in Shared Worker. Reported by Jun Kokatsu @shhnjk on 2017-11-20 793620 High...

[SECURITY] [DSA 3926-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3926-1 [email protected] https://www.debian.org/security/ Michael Gilbert August 04, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3926-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5087 Ned Williamson discovered a way to escape the sandbox. CVE-2017-5088 Xiling Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2017-5089 Michal Bentkowski discovered a spoofing issue...

openSUSE Security Update : chromium (openSUSE-2017-854)

This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed : - CVE-2017-5091: Use after free in IndexedDB - CVE-2017-5092: Use after free in PPAPI - CVE-2017-5093: UI spoofing in Blink - CVE-2017-5094: Type confusion in extensions -...

CVE-2017-1287

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...

CVE-2017-1223

IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...

CVE-2016-8947

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

CVE-2016-8953

IBM Emptoris Sourcing 9.5.x through 10.1.x is affected by an open redirect/phishing vulnerability (CVE-2016-8953). A remote attacker could lure a user to a crafted site to spoof the displayed URL and redirect to a malicious site, potentially harvesting sensitive information. The IBM security bull...

CVE-2016-8953

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

CVE-2017-1398

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...

CVE-2016-7831

Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier Mac App Store may allow a remote attacker to spoof the URL display via a specially crafted webpage...

CVE-2016-7831

Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier Mac App Store may allow a remote attacker to spoof the URL display via a specially crafted webpage...

CVE-2016-7831

Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier Mac App Store may allow a remote attacker to spoof the URL display via a specially crafted webpage...

CVE-2016-7831

CVE-2016-7831 affects Sleipnir for Mac (Mac 4 Black Edition 4.5.3 and earlier, and Sleipnir 4 for Mac 4.5.3 and earlier). The root cause is a flaw in the page transition that allows a remote attacker to spoof the displayed URL via a specially crafted webpage, enabling potential phishing. The refe...