9947 matches found
NetIQ Access Manager Information Disclosure Vulnerability (CNVD-2017-05677)
NetIQ Access Manager provides a simple, secure, and scalable solution to handle all of your web access needs. Whether your users are using a cell phone or laptop to access on-premise or cloud-based services, Access Manager ensures security and provides a single sign-on experience. NetIQ Access...
CVE-2017-7986
CVE-2017-7986 affects Joomla! 1.5.0 through 3.6.5; it is caused by inadequate filtering of specific HTML attributes, leading to cross-site scripting in various components. The issue is fixed in 3.7.0. Exploitation details are not provided beyond the XSS description; upgrade to 3.7.0+ to mitigate.
CVE-2017-7986
In Joomla! 1.5.0 through 3.6.5 fixed in 3.7.0, inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components...
CVE-2017-7986: Improper Neutralization of Input During Web Page Generation
In Joomla! 1.5.0 through 3.6.5 fixed in 3.7.0, inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components...
PT-2017-18048
Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.0 through 3.6.5 Description The issue is related to inadequate filtering of specific HTML attributes, which leads to XSS vulnerabilities in various components. The estimated number of potentially affected devices worldwide...
CVE-2017-5190
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile...
Improper access control
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile...
PT-2017-16375
Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.2 before SP3 HF1 and 4.3 before SP1 HF1 Description The issue is related to a concurrency problem that causes information leakage when NetIQ Access Manager is configured as a SAML 2.0 Identity Server with Virtua...
CVE-2017-5190: Exposure of Sensitive Information to an Unauthorized Actor
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile...
kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate)
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Description of the security update for Excel Services on SharePoint Server 2010: April 11, 2017
Description of the security update for Excel Services on SharePoint Server 2010: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...
Cross-site Scripting (XSS)
vuejs is vulnerable to cross-site scripting XSS attacks. These attacks are possible when rendering html attributes...
CVE-2016-1603
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...
CVE-2016-1603
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...
Information disclosure
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...
CVE-2016-1603
NetIQ IDM ServiceNow Driver before version 1.0.0.1 exposes cryptographic attributes to logged-in users, enabling information disclosure. The vulnerability is documented in CVE-2016-1603 and described across multiple sources (NVD entry and CNVD entry), indicating an information leak in that driver...
CVE-2016-1603
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...
PT-2017-7976
Name of the Vulnerable Software and Affected Versions NetIQ IDM ServiceNow Driver version prior to 1.0.0.1 Description The issue is related to an information leak that could expose cryptographic attributes to logged-in users. Recommendations For versions prior to 1.0.0.1, update to version 1.0.0....
CVE-2016-1603: Exposure of Sensitive Information to an Unauthorized Actor
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...