BELL-CVE-2018-17143 CVE-2018-17143 does not affect BellSoft software

Bulletin has no description...

Fixed in Apache Tomcat 9.0.12

Moderate: Open Redirect CVE-2018-11784 When the default servlet returned a redirect to a directory e.g. redirecting to /foo/ when the user requested /foo a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. This was fixed in revision...

CVE-2018-7681

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system...

Security Bulletin: Multiple security vulnerabilities in Tivoli Storage Manager (IBM Spectrum Protect) Operations Center (CVE-2016-6043, CVE-2016-6044, CVE-2016-6045, CVE-2106-6046)

Summary Multiple security vulnerabilities exist in Tivoli Storage Manager IBM Spectrum Protect Operations Center as described under Vulnerability Details. Vulnerability Details CVEID: CVE-2016-6043 DESCRIPTION: Tivoli Storage Manager Operations Center could allow a local user to take over a...

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect IBM Security Identity Governance and Intelligence

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version1.7 that is used by Identity Governance and Intelligence. Vulnerability Details CVEID: CVE-2016-5597 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Networking...

ManageEngine Recovery Manager Plus 5.3 - Cross-Site Scripting

Exploit Title: ManageEngine Recovery Manager Plus 5.3 Build 5330 - Persistent Cross-Site Scripting Dated: 2018-03-31 Exploit Author: Ahmet GÜREL Software Link: https://www.manageengine.com/ad-recovery-manager/ Version: = 5.3 Build 5330 Platform: Java Tested on: Windows CVE: CVE-2018-9163 1. DETAI...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08426)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the InnoDB component of Oracle MySQL...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08429)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Server: Optimizer component of Orac...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08400)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Client programs component of Oracle...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08383)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Server : Security : Privileges...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08384)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Server: DML component of Oracle MyS...

Oracle Sun Solaris has an unspecified vulnerability (CNVD-2018-09045)

Oracle Sun Solaris is a Unix operating system originally developed by Sun Microsystems. An unspecified vulnerability exists in the RPC component of Oracle Sun Solaris. An attacker could exploit this vulnerability to affect availability...

PT-2018-9182

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9125

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9177

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9178

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

BELL-CVE-2018-8822 CVE-2018-8822 does not affect BellSoft software

Bulletin has no description...

PT-2018-9078

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9079

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9094

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...