2245 matches found
Security Bulletin: IBM Security Identity Adapters affected by OpenSSL RSA Key vulnerability (CVE-2018-0737)
Summary The Windows and z/OS Security Identity Adapters are now upgraded to a more current release to correct CVE CVE-2018-0737 "OpenSSL RSA Key generation algorithm information disclosure". Vulnerability Details CVEID: CVE-2018-0737 DESCRIPTION: OpenSSL could allow a local attacker to obtain...
Stored Cross-Site Scripting Vulnerability in Zendo Project Management Software z***-c***.php
Zendo Project Management Software is homegrown open source project management software. A stored cross-site scripting vulnerability exists in Zendo Project Management Software z-c.php. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to...
Security Bulletin: WAS traditional and liberty vulnerable to CVE-2014-7810
Summary IBM Worklight has addressed the following vulnerability. WAS traditional and liberty vulnerable to CVE-2014-7810 Vulnerability Details CVEID: CVE-2014-7810 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the use of expression language. A...
ZAKER News APP Z Coin Mall has xss vulnerability
ZAKER is an interactive sharing and personalized reading platform in China. ZAKER News APP Z Coin Mall has an xss vulnerability that can be exploited by attackers to disclose sensitive information about the mall...
Security Bulletin: OpenSSL ASN.1 denial of service
Summary The Windows and z/OS Security Identity Adapters are now upgraded to a more current release to correct CVE CVE-2018-0739 "OpenSSL ASN.1 denial of service". Vulnerability Details CVEID: CVE-2018-0739 Description: OpenSSL is vulnerable to a denial of service. By sending specially crafted ASN...
Security Bulletin: IBM® DB2® contains a denial of service vulnerability in scalar functions (CVE-2018-1977)
Summary IBM DB2 contains a denial of service vulnerability on Linux System z® platform. A remote, authenticated DB2 user could exploit this vulnerability by executing a specially-crafted SQL statement with the TRUNCATE scalar functions. This could result in a DB2 server crash; if so, the server...
SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2018:4064-1)
java-180-ibm was updated to Java 8.0 Service Refresh 5 Fix Pack 25 bsc1116574 Class Libraries : - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932 CVE-2018-3149 - IJ10894 CVE-2018-3180 - IJ10930 CVE-2018-3183 - IJ10933 CVE-2018-3214 - IJ09315 FLOATING POINT EXCEPTI...
CVE-2018-19983
An issue was discovered on Sigma Design Z-Wave S0 through S2 devices. An attacker first prepares a Z-Wave frame-transmission program e.g., Z-Wave PC Controller, OpenZWave, CC1110, etc.. Next, the attacker conducts a DoS attack against the Z-Wave S0 Security version product by continuously sending...
Code injection
An issue was discovered on Sigma Design Z-Wave S0 through S2 devices. An attacker first prepares a Z-Wave frame-transmission program e.g., Z-Wave PC Controller, OpenZWave, CC1110, etc.. Next, the attacker conducts a DoS attack against the Z-Wave S0 Security version product by continuously sending...
Design/Logic Flaw
An issue was discovered on KT MC01507L Z-Wave S0 devices. It occurs because HPKP is not implemented. The communication architecture is APP Server Controller HUB Node products which are controlled by HUB. The prerequisite is that the attacker is on the same network as the target HUB, and can use I...
CVE-2018-19982
An issue was discovered on KT MC01507L Z-Wave S0 devices. It occurs because HPKP is not implemented. The communication architecture is APP Server Controller HUB Node products which are controlled by HUB. The prerequisite is that the attacker is on the same network as the target HUB, and can use I...
CVE-2018-19983
CVE-2018-19983 affects Sigma Design Z-Wave devices (S0 through S2). An attacker can perform a DoS by repeatedly sending divided Nonce Get frames (0x98 0x81). In S0, upon receiving a Nonce Get, the node generates and sends a new nonce, then waits; if another Nonce Get arrives, the previous nonce i...
CVE-2018-19982
An issue was discovered on KT MC01507L Z-Wave S0 devices. It occurs because HPKP is not implemented. The communication architecture is APP Server Controller HUB Node products which are controlled by HUB. The prerequisite is that the attacker is on the same network as the target HUB, and can use I...
CVE-2018-19983
An issue was discovered on Sigma Design Z-Wave S0 through S2 devices. An attacker first prepares a Z-Wave frame-transmission program e.g., Z-Wave PC Controller, OpenZWave, CC1110, etc.. Next, the attacker conducts a DoS attack against the Z-Wave S0 Security version product by continuously sending...
CVE-2018-19982
CVE-2018-19982 affects KT MC01507L Z-Wave S0 devices. The issue arises because HPKP is not implemented, enabling an attacker on the same network to use IP Changer to redirect packets destined for the Server to a proxy, allowing sniffing of cleartext between Server and Controller. The attacker can...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect z/TPF
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product, you should evaluate your code to...
ZERO TRUST SECURITY - THREAT REPORT FOR EDUCATION
Originally Published: Generation Z and New Challenges in the Education Field The youth of Generation Z grew up with Windows 2000 and XP, and many played with iPhones, iPads, and Android products. Known as digital natives, they are an essential part of today's educational landscape -- where cloud,...
SUSE-SU-2018:3933-1 Security update for java-1_7_1-ibm
java-171-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 35 bsc1116574: Consumability - IJ10515 AIX JAVA 7.1.3.10 GENERAL PROTECTION FAULT WHEN ATTEMPTING TO USE HEALTH CENTER API Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932 CVE-2018-31...