Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...

Memory Corruption

The X11 Xorg libraries provide library routines that are used within all X Window applications. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol da...

Integer Overflow

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

Cross-Site Request Forgery (CSRF)

OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution from Red Hat, and is designed for on-premise or private cloud deployments. The OpenShift Enterprise 1.2 Release Notes provide information about changes in this release, and instructions on how to upgrade from previous...

Security Bulletin: Multiple vulnerabilities affect Watson Explorer (CVE-2017-14166, CVE-2017-14501, CVE-2017-14502, CVE-2017-14503)

Summary Multiple libarchive vulnerabilities affect Watson Explorer. Vulnerability Details CVEID: CVE-2017-14166 DESCRIPTION: libarchive is vulnerable to a denial of service, caused by a xmldata heap-based buffer over-read issue in the atol8 function in archivereadsupportformatxar.c. By persuading...

ENTTEC Lighting Controllers

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ENTTEC Equipment: Datagate MK2, Storm 24, Pixelator Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could reboot this...

Securing Your Direct Internet Access Connections

With the rapid uptake in SaaS applications and the ease of moving enterprise applications from the data center to the cloud, many global companies are transforming the way they connect branch offices. In the past, the conventional approach was to connect all of your locations over an MPLS Wide Ar...

Low: Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform security update

An update is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

GHSA-86G5-2WH3-GC9J Path Traversal in Action View

File Content Disclosure in Action View Impact ------ There is a possible file content disclosure vulnerability in Action View. Specially crafted accept headers in combination with calls to render file: can cause arbitrary files on the target server to be rendered, disclosing the file contents. Th...

Node.js -- multiple vulnerabilities

Node.js reports: Updates are now available for all active Node.js release lines. In addition to fixes for security flaws in Node.js, they also include upgrades of Node.js 6 and 8 to OpenSSL 1.0.2r which contains a fix for a moderate severity security vulnerability. For these releases, we have...

Security Bulletin: IBM MQ Advanced Cloud Paks are vulnerable to multiple issues with in the Systemd package (CVE-2018-16866 CVE-2018-16864 CVE-2018-16865)

Summary Multiple vulnerabilities were identified with the Systemd package that is included in all versions of the IBM MQ CloudPak. Vulnerability Details CVEID: CVE-2018-16866 DESCRIPTION: systemd could allow a local attacker to obtain sensitive information, caused by an out-of-bounds read in...

Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Virtualization Engine TS7700 - July 2018 & October 2018

Summary There are multiple vulnerabilities in IBM® SDK, Java™ Technology Edition, Versions 7 and 8, that are used by IBM Virtualization Engine TS7700. These issues were disclosed as part of the IBM Java SDK updates in July 2018 and October 2018. Vulnerability Details CVEID: CVE-2018-1517...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Flex System Manager (FSM) (CVE-2015-0235)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects IBM Flex System Manager FSM. Vulnerability Details Abstract GNU C library glibc vulnerability that has been referred to as GHOST affects IBM Flex System Manager FSM. Vulnerability Details: CVE-ID: CVE-2015-0235...

Security Bulletin: Multiple vulnerabilities in rsyslog affect IBM Flex System Manager (FSM): (CVE-2014-3634 and CVE-2014-3683)

Summary There are multiple vulnerabilities in rsyslog that is used by IBM Flex System Manager. Vulnerability Details Abstract There are multiple vulnerabilities in rsyslog that is used by IBM Flex System Manager. Content Vulnerability Details: CVE-ID: CVE-2014-3634 Description: RSyslog and sysklo...

Security Bulletin: Vulnerabilities in dbus affect the IBM Flex System Manager (FSM) (CVE-2014-3638, CVE-2014-3639, CVE-2014-3477)

Summary Vulnerabilities in dbus affect the IBM Flex System Manager FSM CVE-2014-3638, CVE-2014-3639, CVE-2014-3477 Vulnerability Details Abstract Vulnerabilities in dbus affect the IBM Flex System Manager FSM CVE-2014-3638, CVE-2014-3639, CVE-2014-3477 Content Vulnerability Details: CVE-ID:...

Security Bulletin: A vulnerability in ntp affects IBM Flex System Manager (FSM): (CVE-2014-9295)

Summary Vulnerabilities have been found in ntp that is used by IBM Flex System Manager FSM. Vulnerability Details Abstract Vulnerabilities have been found in ntp that is used by IBM Flex System Manager FSM. Content Vulnerability Details: CVE-ID: CVE-2014-9295 Description: Network Time Protocol NT...

Security Bulletin: Vulnerabilities in Apache affect the IBM Flex System Manager (FSM): (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)

Summary Vulnerabilities in Apache affect the IBM Flex System Manager FSM: CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231 Vulnerability Details Abstract Vulnerabilities in Apache affect the IBM Flex System Manager FSM: CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231 Content...

Security Bulletin: Vulnerabilities in glibc affect the IBM Flex System Manager (FSM): (CVE-2013-4332, CVE-2014-0475, CVE-2014-5119)

Summary Vulnerabilities in glibc affect the IBM Flex System Manager FSM: CVE-2013-4332, CVE-2014-0475, CVE-2014-5119 Vulnerability Details Abstract Vulnerabilities in glibc affect the IBM Flex System Manager FSM: CVE-2013-4332, CVE-2014-0475, CVE-2014-5119 Content Vulnerability Details: CVE-ID:...