Threat Outbreak Alert RuleID33084: Email Messages Distributing Malicious Software on July 3, 2018

Medium Alert ID: 58338 First Published: 2018 July 3 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33084 may contain the following files: Name | Size...

CVE-2018-1249

Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle attacker could use this vulnerability to strip the SSL/TLS protection from a connection between a client and a server...

Emerson Liebert IntelliSlot Web Card Device Design Vulnerability

Emerson Liebert IntelliSlot Web Card devices is an intelligent web card product from Emerson Electric USA. A security vulnerability exists in the Emerson Liebert IntelliSlot Web Card devices. A remote attacker can exploit this vulnerability to reconfigure access control via the...

Threat Outbreak Alert RuleID33024: Email Messages Distributing Malicious Software on June 29, 2018

Medium Alert ID: 58322 First Published: 2018 June 29 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33024 may contain the following files: Name | Siz...

Mozilla: address bar username and password spoofing in reader mode

When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox 54...

Threat Outbreak Alert RuleID32978: Email Messages Distributing Malicious Software on June 26, 2018

Medium Alert ID: 58296 First Published: 2018 June 26 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32978 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID33044: Email Messages Distributing Malicious Software on June 25, 2018

Medium Alert ID: 58289 First Published: 2018 June 25 19:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33044 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID33034: Email Messages Distributing Malicious Software on June 21, 2018

Medium Alert ID: 58265 First Published: 2018 June 21 19:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33034 may contain the following files: Name | Siz...

CVE-2018-7681

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system...

CVE-2018-7681

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system...

CVE-2018-12563

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavaserver and valid yaml...

Design/Logic Flaw

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavaserver and valid yaml...

Security Bulletin: IBM MQ certain file URLs could cause a buffer overwrite (CVE-2017-9502)

Summary A problem within the libcurl library means certain file URLs could cause a buffer overwrite within IBM MQ. Vulnerability Details CVEID: CVE-2017-9502 DESCRIPTION: libcurl is vulnerable to a heap-based buffer overflow, caused by a flaw in the file protocol. By sending a specially-crafted...

Security Bulletin: varying error codes allows detection of existing systems behind firewall

Summary A security vulnerability related to content handler URLs makes it possible to check if a system exists for example, behind a firewall. A different error code is returned for a systems that exist but are not accessible via the proxy functionality versus b systems that do not exist. Affecte...

Security Bulletin: Cross-site scripting vulnerability in IBM Business Process Manager (BPM) redirect-login mechanism (CVE-2014-6101)

Summary IBM Business Process Manager uses a mechanism to silently login users who have previously authenticated themselves. This mechanism is vulnerable to cross-site scripting attacks. Vulnerability Details CVE ID: CVE-2014-6101 DESCRIPTION: IBM Business Process Manager is vulnerable to cross-si...

CVE-2018-11690

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the...

Threat Outbreak Alert RuleID32909: Email Messages Distributing Malicious Software on June 12, 2018

Medium Alert ID: 58150 First Published: 2018 June 12 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32909 may contain the following files: Name | Siz...

CVE-2018-5141

A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This could be used to open new tabs in a denial of service DOS attack or to display unwanted content from arbitrary URLs to users. This vulnerabili...

CVE-2018-5134

WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that only allow WebExtensions to view specific content. This vulnerability affects Firefox 59...

CVE-2018-5112

Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was not enforced in all instances. This could allow the development tools panel for the extension to load a URL that it should not be able to...