CVE-2016-0254

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...

IBM Cognos TM1 Cross-Site Scripting Vulnerability (CNVD-2017-05100)

IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A cross-site scripting vulnerability exists in...

IBM Cognos TM1 Denial of Service Vulnerability (CNVD-2017-06013)

IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A denial of service vulnerability exists in IBM...

Apple Safari and iOS Safari Reader Component Cross-Site Scripting Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Apple Safari is a web browser that is the default browser shipped with Mac OS X and iOS operating systems; Safari Reader is one of the browser's own Reader component. A cross-site...

FreeBSD Kernel amd64_set_ldt Heap Overflow Vulnerability

FreeBSD is a UNIX operating system. An integer signature error in the amd64setldt function in the kernel code of versions prior to FreeBSD 10.2-RELENG can lead to a kernel heap overflow, which can cause a system crash in a local attacker...

CVE-2015-5014

IBM Cognos Disclosure Management CDM 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation...