9952 matches found
CVE-2016-1603
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...
CVE-2016-1603
NetIQ IDM ServiceNow Driver before version 1.0.0.1 exposes cryptographic attributes to logged-in users, enabling information disclosure. The vulnerability is documented in CVE-2016-1603 and described across multiple sources (NVD entry and CNVD entry), indicating an information leak in that driver...
CVE-2016-1603
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...
CVE-2016-1603: Exposure of Sensitive Information to an Unauthorized Actor
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...
PT-2017-7976
Name of the Vulnerable Software and Affected Versions NetIQ IDM ServiceNow Driver version prior to 1.0.0.1 Description The issue is related to an information leak that could expose cryptographic attributes to logged-in users. Recommendations For versions prior to 1.0.0.1, update to version 1.0.0....
MS17-014: Description of the security update for SharePoint Server 2010 Office Web Apps: March 14, 2017
MS17-014: Description of the security update for SharePoint Server 2010 Office Web Apps: March 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...
MS17-014: Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: March 14, 2017 (KB3178677)
None None...
USN-3225-1: libarchive vulnerabilities
It was discovered that libarchive incorrectly handled hardlink entries when extracting archives. A remote attacker could possibly use this issue to overwrite arbitrary files. CVE-2016-5418 Christian Wressnegger, Alwin Maier, and Fabian Yamaguchi discovered that libarchive incorrectly handled...
DEBIAN-CVE-2017-6310
An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the fileaddmapiattrs function. These might lead to invalid read and write operations, controlled by an attacker...
[20170404] - Core - XSS Vulnerability
Inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components...
Design/Logic Flaw
F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files...
CVE-2016-8689
The readHeader function in archivereadsupportformat7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service out-of-bounds read via multiple EmptyStream attributes in a header in a 7zip archive...
CVE-2016-8689
The readHeader function in archivereadsupportformat7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service out-of-bounds read via multiple EmptyStream attributes in a header in a 7zip archive...
CVE-2017-2618
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...
UBUNTU-CVE-2017-2618
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...
PT-2017-15452 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.10 Description: A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files. An empty null write to this file can crash the system by causing the system to attempt ...
CVE-2015-8862
mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...
PT-2017-7494
Name of the Vulnerable Software and Affected Versions mustache versions prior to 2.2.1 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted. This can occur when attributes in mustache templates are...
PT-2017-7493
Name of the Vulnerable Software and Affected Versions handlebars versions prior to 4.0.0 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted. This occurs when attributes in handlebar templates are...