CVE-2019-4174

CVE-2019-4174 affects IBM Cognos Controller versions 10.2.0–10.4.0, where web pages can be stored locally on disk and read by another user on the same system. The issue is disclosed in the public records for IBM Cognos Controller, with remediation guidance recommending applying the provided fixes...

CVE-2019-4177

IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158882...

PT-2019-16949 · Ibm · Ibm Cognos Controller

Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 10.2.0 through 10.4.0 Description: The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations: For versions 10.2.0 through 10.4.0, consider implementin...

CVE-2019-1011

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

[SECURITY] Fedora 29 Update: php-7.2.19-2.fc29

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

CVE-2019-4218

IBM Security Information Queue ISIQ 1.0.0, 1.0.1, and 1.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 159227...

PT-2019-16973 · Ibm · Ibm Security Information Queue

Name of the Vulnerable Software and Affected Versions: IBM Security Information Queue ISIQ versions 1.0.0 through 1.0.2 Description: The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations: For versions 1.0.0 through 1.0.2, consider...

Security Bulletin: IBM Security Information Queue does not prevent caching of sensitive pages

Summary IBM Security Information Queue ISIQ allows web pages containing sensitive content to be cached by a browser and thus become vulnerable to attackers or malware. As of v1.0.3, the ISIQ web server instructs the browser to not cache the content. Vulnerability Details CVEID: CVE-2019-4218...

[SECURITY] Fedora 28 Update: php-7.2.18-1.fc28

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

[SECURITY] Fedora 29 Update: php-7.2.18-1.fc29

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

[SECURITY] Fedora 30 Update: rubygem-actionview-5.2.3-2.fc30

Simple, battle-tested conventions and helpers for building web pages...

Fedora Update for rubygem-actionview FEDORA-2019-1cfe24db5c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, allows attackers to inject arbitrary code into the web pages that are uploaded.

The vulnerability of SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web pages...

CVE-2019-0282

Several web pages in SAP NetWeaver Process Integration Runtime Workbench, fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed without user authentication, which might expose internal data like release information, Java package and Java object names which can be misused by the...

PT-2019-1813 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by a buffer overflow in the Windows Graphics Device Interface GDI due to improper handling of objects in memory. This allows a remote attacker to execute arbitrary code ...

CVE-2018-1623

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 144408...

CVE-2018-1623

CVE-2018-1623 affects IBM Security Privileged Identity Manager Virtual Appliance. The vulnerability allows web pages to be stored locally and readable by another user on the same system (impact: local information disclosure). Affected product/version per the dossier: IBM Security Privileged Ident...

IBM Security Privileged Identity Manager Information Disclosure Vulnerability (CNVD-2019-27598)

IBM Security Privileged Identity Manager ISPIM is an identity management product within the IBM Identity Governance and Management solution from IBM in the United States. The product is designed to protect, automate and audit the use of privileged identities to help defend against insider threats...

CVE-2019-1003042

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin...

CVE-2019-1003042

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin...