Secure Mail does not sync emails after upgrading to version 10.6.0

Emails are not syncing for users after the Secure Mail update to 10.6.0. We will see the following Socket errors in the logs: 2017-07-25T06:17:37.266-0400 AGTunneler INFO 4 -AGSocket connect:withPort: -AGSocket connect:withPort:: CallOriginalconnect errno = 36 - 'Operation now in progress', fd = ...

VX Search Enterprise Buffer Overflow Vulnerability

VX Search Enterprise is an automated, rule-based file search solution. A buffer overflow vulnerability exists in the web server service in VX Search Enterprise version 10.0.14. A remote attacker can exploit this vulnerability to execute arbitrary code via a specially crafted GET request...

IBM Emptoris Strategic Supply Management Arbitrary Code Execution Vulnerability

The IBM Emptoris Strategic Supply Management Platform is a common Web-based portal for accessing the Emptoris suite of products from IBM. An arbitrary code execution vulnerability exists in IBM Emptoris Strategic Supply Management Platform versions 10.x and 10.1. A local attacker could exploit th...

IBM Emptoris Strategic Supply Management Cross-Site Scripting Vulnerability

The IBM Emptoris Strategic Supply Management Platform is a common Web-based portal for accessing the Emptoris suite of products from IBM. A cross-site scripting vulnerability exists in IBM Emptoris Strategic Supply Management Platform versions 10.0 and 10.1. A remote attacker can exploit this...

CVE-2016-6021

IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2017-3632

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE Calendar. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of thi...

CVE-2017-6746

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

CVE-2016-6018

IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...

Mozilla: Domain spoofing with combination of Canadian Syllabics and other unicode blocks (MFSA 2017-16)

Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw "punycode" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows...

CVE-2016-0254

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...

Halliburton LogView Pro Buffer Overflow Vulnerability

Halliburton LogView Pro is a text log viewing software. A buffer overflow vulnerability exists in Halliburton LogView Pro version 10.0.1. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted .tif file...

PCRE2 Buffer Overflow Vulnerability (CNVD-2017-06216)

PCRE2 is an API for modifying PCRE Open Source Regular Expression Library developed by software developer Philip Hazel. A heap buffer overflow vulnerability exists in the pcre2test.c file in PCRE2 version 10.23. A remote attacker could exploit this vulnerability to cause a denial of service with...

IBM Cognos TM1 Denial of Service Vulnerability (CNVD-2017-06013)

IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A denial of service vulnerability exists in IBM...

IBM Cognos TM1 Cross-Site Scripting Vulnerability (CNVD-2017-05100)

IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A cross-site scripting vulnerability exists in...

SQL Injection Vulnerability in Love Channel Music V10.01 System logo.php Page

Love Channel Music System is an audio-visual management system developed using php+Mysql. An SQL injection vulnerability exists in the logo.php page of the Love Channel Music V10.01 system. The lack of filtering of the 'cdid' parameter allows attackers to exploit the vulnerability to obtain...

CVE-2017-1150

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference : 1999515...

NETGEAR DGN2200 Arbitrary Command Execution Vulnerability

The NETGEAR DGN2200 is an ADSL router device. An arbitrary command execution vulnerability in ping.cgi in the NETGEAR DGN2200 version 10.0.0.50 can be exploited to execute arbitrary operating system commands via shell metacharacters in the pingIPAddr field of an HTTP POST request...

Apple Safari and iOS Safari Reader Component Cross-Site Scripting Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Apple Safari is a web browser that is the default browser shipped with Mac OS X and iOS operating systems; Safari Reader is one of the browser's own Reader component. A cross-site...

Apple macOS Sierra AppleGraphicsPowerManagement Component Denial of Service Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsPowerManagement is one of the graphics card power management components. A security vulnerability exists in the AppleGraphicsPowerManagement component in Apple macOS Sierra versions prior to...

CVE-2016-0246

Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...