Oracle WebLogic Server WLS Security Component Deserialization Vulnerability

Added: 01/09/2018 BID: 101304 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server has a vulnerability in the WLS Security wls-wsat component that could allow an unauthenticated remote attacker who has HTTP access to the...

pedagogie.ac-aix-marseille.fr XSS vulnerability

Open Bug Bounty ID: OBB-485043 Description| Value ---|--- Affected Website:| pedagogie.ac-aix-marseille.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

Vulnerability in OpenSSL affects AIX

IBM SECURITY ADVISORY First Issued: Thu Dec 14 14:57:00 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory24.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory24.asc...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued: Thu Dec 7 12:20:05 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaoct2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaoct2017advisory.asc...

The vulnerability of the installp and updatep packages in the JRE/SDK of the IBM AIX operating system allows a attacker to manipulate the update process for files such as java.security, java.policy, and javaws.policy.

The vulnerability of the installp and updatep packages in the JRE/SDK of the IBM AIX operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to manipulate the update process for files such as java.security, java.policy, and...

Vulnerabilities in OpenSSH affect AIX.

IBM SECURITY ADVISORY First Issued: Tue Nov 14 09:46:19 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory11.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory11.asc...

There are multiple vulnerabilities in tcpdump that impact AIX.

IBM SECURITY ADVISORY First Issued: Wed Nov 8 09:27:01 CST 2017 |Updated: Wed Feb 28 09:33:13 CST 2018 |Update: Corrected the APARs listed under the APAR section. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/tcpdumpadvisory3.asc...

AIX bind Advisory : nettcp_advisory2.asc (IV86116) (IV86117) (IV86118) (IV86119) (IV86120) (IV86132)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - The TLS protocol allows weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker can...

appli.ac-aix-marseille.fr XSS vulnerability

Vulnerable URL: https://appli.ac-aix-marseille.fr/login/ctlogon.jsp?CTORIGURL="\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

CVE-2017-1541

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

CVE-2017-1541

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

Design/Logic Flaw

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

CVE-2017-1541

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

CVE-2017-1541

CVE-2017-1541 is an IBM AIX Java vulnerability where the JRE/SDK installp and updatep packages could fail to update the files java.security, java.policy, and javaws.policy. Affected: AIX 5.3, 6.1, 7.1, 7.2 (and VIOS 2.2.x); root cause is improper updating of security policy files, which may impac...

IBM AIX JRE/SDK installp and updatep package denial of service vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM in the U.S. JRE/SDK installp and updatep packages are among the packages.JRE/SDK install packages are a JRE/SDK installation package; updatep packages are JRE/SDK update packages. JRE/SDK installp packages is a...

There is a vulnerability in the AIX IBM Java 6 SDK installp and updatep packages

IBM SECURITY ADVISORY First Issued: Mon Sep 18 09:05:13 CDT 2017 |Updated: Mon Oct 2 09:00:12 CDT 2017 |Update 1: Impacted fileset information and iFixes added for AIX Java 6 | VRMFs from 6.0.0.215 to 6.0.0.465. | Complete impacted filesets now listed as: | Java6.sdk: 6.0.0.215-6.0.0.645 |...

AIX Java Advisory : java_july2017_advisory.asc (July 2017 CPU)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - A flaw exists in the J9 VM class verifier component that allows an unauthenticated, remote attacker to cause an escalation of privileges. CVE-2017-1376 - A flaw exis...

AIX Java Advisory : java_apr2017_advisory.asc (April 2017 CPU)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - Multiple vulnerabilities exist in the zlib subcomponent that allow an unauthenticated, remote attacker to trigger denial of service conditions. CVE-2016-9840,...

AIX Java Advisory : java_jan2017_advisory.asc (January 2017 CPU) (SWEET32)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - A vulnerability exists in the Libraries subcomponent, known as SWEET32, in the 3DES and Blowfish algorithms due to the use of weak 64-bit block ciphers by default. A...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued: Fri Sep 1 08:58:20 CDT 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2017advisory.asc...