3357 matches found
PT-2017-12992
Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Adapters versions 6.0 through 7.0 Description The issue concerns the storage of user credentials in plain text, which can be accessed by a local user. Recommendations For versions 6.0 through 7.0, update to a...
CVE-2017-8047: Cloud Foundry router open redirect | Cloud Foundry
Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions routing-release All versions prior to v0.163.0 cf-release All versions prior to v274 Please note: due to a bug in 274, it is not recommended for production use. Deployments should use v275 or later...
Stock Photo Selling 1.0 - SQL Injection Exploit
Exploit for php platform in category web applications !/usr/bin/perl -w Exploit Title: Stock Photo Selling Script 1.0 - SQL Injection Dork: N/A Date: 21.09.2017 Vendor Homepage: http://sixthlife.net/ Software Link: http://sixthlife.net/product/stock-photo-selling-website/ Demo:...
XenMobile Authentication Prompt Scenarios.
Question : What are the scenarios in XenMobile where users are prompted to authenticate. Answer :The scenarios change depending on these factors: Your MDX app policy and Client Property configuration in the XenMobile console settings. Whether the authentication occurs offline, or needs to be an...
ProcessMaker Enterprise Core Multiple SQL Injection Vulnerabilities(CVE-2016-9048)
Summary Multiple exploitable SQL Injection vulnerabilities exists in ProcessMarker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability,...
CVE-2016-2972
IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855...
CVE-2016-2972
IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855...
MGASA-2017-0250 Updated virtualbox packages fix security vulnerabilities
This update provides the virtualbox 5.1.26 maintenance release, fixing security and other issues: This Critical Patch Update contains 14 new unspcified security fixes for Oracle VM VirtualBox. According to currently known info, none of these vulnerabilities may be remotely exploitable without...
StoreFront upgrade fails to keep the setting in default ICA file
During the upgrade process of StoreFront, the changes made in the Manually modified files including default.ica and usernamepassword.tfrm are not retained...
IBM Jazz Reporting Service Information Disclosure Vulnerability (CNVD-2017-21248)
IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...
CVE-2017-1370
CVE-2017-1370 affects IBM Jazz Reporting Service (JRS) versions 5.0–6.0 (as shipped with RRDI/Rational Insight). The vulnerability allows disclosure of sensitive information, including user credentials, via an error message on the Report Builder administrator configuration page. IBM security bull...
PT-2017-13028
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS versions 5.0 through 6.0 Description The issue could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. Recommendations...
CVE-2017-1370: Generation of Error Message Containing Sensitive Information
IBM Jazz Reporting Service JRS 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863...
CVE-2017-3221
Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...
Sql injection
Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...
CVE-2017-3221
Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...
CVE-2017-3221
Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...
CVE-2017-3221
The CVE-2017-3221 issue is a Blind SQL Injection in Inmarsat AmosConnect 8 login form. The vulnerability allows attackers on the same network to access user credentials (usernames and passwords) stored by AmosConnect 8, with the ThreatPost report noting the server stores usernames and passwords i...
CVE-2017-3221: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...