62 matches found
forum-xperiablog.24629.x6.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1186758 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
wikimedia.7.x6.nabble.com Cross Site Scripting vulnerability OBB-1184902
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cheat-codex.87983.x6.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181961 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
sonarqube-archive.15.x6.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181758 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2012-4900
CVE-2012-4900 affects Corel WordPerfect Office X6 Standard Edition (WordPerfect X6), version 16.0.0.388. The connected advisory details a vulnerability in WPD parsing caused by an untrusted pointer dereference, specifically within WPWIN16.DLL STARTAPP when STRNICMP is invoked in MSVCR80. This lea...
CVE-2012-4900
Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference...
CVE-2012-4900: Out-of-bounds Write
Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference...
VMware vSphere Data Protection 5.x6.x - Java Deserialization
VMware vSphere Data Protection 5.x6.x - Java Deserialization !/usr/bin/env python import socket import sys import ssl def getHeader: return '\x4a\x52\x4d\x49\x00\x02\x4b' def payload: cmd = sys.argv4 cmdlen = lencmd data2 =...
CVE-2016-8226
CVE-2016-8226 affects Lenovo System X M5, M6, and X6 BIOS. The vulnerability allows an administrator to cause a denial of service by updating a UEFI data structure, which can prevent POST and boot. Descriptions in the Lenovo LEN-11306 advisory confirm a Lenovo-specific BIOS/POST impact and recomm...
CVE-2016-8226: Undefined Security Weakness
The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure...
CVE-2014-4768
IBM Unified Extensible Firmware Interface UEFI on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices allows remote authenticated users to cause an unspecified temporary denial of service by using privileged access to enable a legacy boot mode...
CVE-2014-4768
IBM Unified Extensible Firmware Interface UEFI on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices allows remote authenticated users to cause an unspecified temporary denial of service by using privileged access to enable a legacy boot mode...
CVE-2014-4768
The CVE-2014-4768 issue affects IBM UEFI on Flex System x880 X6 and System x3850/x3950 X6, enabling a privileged user to configure legacy boot mode that causes a temporary denial of service. Affected firmware levels and MTMs are listed in IBM’s Security Bulletin: for x880 X6 MTM 4259/7903, ibm_fw...
CVE-2014-4768: Undefined Security Weakness
IBM Unified Extensible Firmware Interface UEFI on Flex System x880 X6, System x3850 X6, and System x3950 X6 devices allows remote authenticated users to cause an unspecified temporary denial of service by using privileged access to enable a legacy boot mode...
openSUSE Security Update : kernel (openSUSE-SU-2014:0204-1)
The Linux kernel was updated to fix various bugs and security issues : - mm/page-writeback.c: do not count anon pages as dirtyable memory reclaim stalls. - mm/page-writeback.c: fix dirtybalancereserve subtraction from dirtyable memory reclaim stalls. - compatsysrecvmmsg X32 fix bnc860993...
CVE-2013-0733: Undefined Security Weakness
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file...
CVE-2012-4728: Undefined Security Weakness
The 1 QProGetNotebookWindowHandle and 2 Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition 16.0.0.388 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted QPW file...
kernel: security and bugfix update (important)
The Linux kernel was updated to fix various bugs and security issues: - mm/page-writeback.c: do not count anon pages as dirtyable memory reclaim stalls. - mm/page-writeback.c: fix dirtybalancereserve subtraction from dirtyable memory reclaim stalls. - compatsysrecvmmsg X32 fix bnc860993...
CVE-2012-4960
CVE-2012-4960 covers a DES-based password encryption weakness in Huawei networking devices (including NE5000E, NE40E/80E, CX/ CX600, and related models). The root cause is use of DES for stored passwords, enabling brute-force or context-dependent attacks to recover cleartext passwords. Public adv...
Untrusted Pointer Dereference Vulnerability in Corel WordPerfect X6
Advisory ID: HTB23114 Product: Corel WordPerfect X6 Standard Edition Vendor: Corel Corporation Vulnerable Versions: 16.0.0.388, other versions may be also affected Tested Version: 16.0.0.388 on Windows 7 SP1 32 bits Vendor Notification: September 12, 2012 Public Disclosure: March 7, 2013...