CVE-2017-16691: Improper Input Validation

SAP Note Assistant tool SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31,7.40, from 7.50 to 7.52 supports upload of digitally signed note file of type 'SAR'. The digital signature verification is done together with the extraction of note file contained in the SAR archive. It is possible...

PT-2017-14527

Name of the Vulnerable Software and Affected Versions SAP BASIS versions 7.00 through 7.02 SAP BASIS versions 7.10 through 7.11 SAP BASIS version 7.30 SAP BASIS version 7.31 SAP BASIS version 7.40 SAP BASIS versions 7.50 through 7.52 Description The issue concerns the SAP Note Assistant tool, whi...

Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - Lenovo Support NL

No description provided...

SAP Note Assistant Insecure handling of SAP Notes signature vulnerability

Advisory ID Internal CORE-2017-0011 1. Advisory Information Title: SAP Note Assistant Insecure handling of SAP Notes signature vulnerability Advisory ID: CORE-2017-0011 Advisory...

Privilege escalation

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...

CVE-2017-1710

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...

Home Assistant Cross-Site Scripting Vulnerability

Home Assistant is an open source platform for automated management of home network devices. A cross-site scripting vulnerability exists in versions of Home Assistant prior to 0.57. A remote attacker can exploit this vulnerability to inject JavaScript code via specially crafted Markdown text...

PT-2017-14712

Name of the Vulnerable Software and Affected Versions IBM Storwize V7000 2076 version 8.1 Description A remote attacker could exploit a vulnerability in the Service Assistant GUI to perform a privilege escalation. Recommendations For IBM Storwize V7000 2076 version 8.1, update to a version that...

Service Assistant GUI Elevation of Privilege Vulnerability in Multiple IBM Products

The IBM Storwize V7000, Storwize V5000, and FlashSystem V9000 are products of IBM Corporation in the U.S.A. The IBM Storwize V7000 and Storwize V5000 are virtualized storage systems.The FlashSystem V9000 is an all-flash enterprise storage The Service Assistant GUI is one of the graphical user...

CVE-2017-1710: Undefined Security Weakness

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...

CVE-2017-16782

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

CVE-2017-16782

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

CVE-2017-16782

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

CVE-2017-16782

CVE-2017-16782 affects Home Assistant prior to 0.57. It is a cross-site scripting (XSS) vulnerability in the persistent notification rendering, where crafted Markdown text can inject JavaScript. The root cause is improper sanitization in Markdown rendering for notifications, enabling arbitrary sc...

PT-2017-14555

Name of the Vulnerable Software and Affected Versions Home Assistant versions prior to 0.57 Description The issue allows for the injection of JavaScript code into a persistent notification via crafted Markdown text. This can lead to a cross-site scripting XSS attack. Recommendations For versions...

CVE-2017-16782: Improper Neutralization of Input During Web Page Generation

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

CVE-2017-7143

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Network Assistant" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the captive portal...

CVE-2017-7143

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Network Assistant" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the captive portal...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Network Assistant" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the captive portal...

CVE-2017-7143

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Network Assistant" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the captive portal...