Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Rational ClearCase (CVE-2017-10356, CVE-2017-10345)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 6, 7, and 8, which are used by IBM Rational ClearCase. These issues were disclosed as part of the IBM Java SDK updates in October 2017. Vulnerability Details CVEID: CVE-2017-10356 DESCRIPTION: An unspecified...

Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2015-1829)

Summary IBM HTTP Server is shipped as a component of IBM Rational ClearCase. Information about a security vulnerability affecting IBM HTTP Server has been published in a security bulletin. Vulnerability Details Please consult the Security Bulletin: Potential denial of service may affect IBM HTTP...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Rational ClearCase

Summary IBM WebSphere Application Server is shipped as a component of IBM Rational ClearCase. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details | Subscribe to My Notifications to be notified of...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational ClearCase (CVE-2016-3426, CVE-2016-3427)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Rational ClearCase. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the bulletin "Security Bulletin: Multiple vulnerabilities in IBM® Ja...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational ClearCase (CVE-2015-0254)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Rational ClearCase. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

CVE-2018-13714

CVE-2018-13714 concerns the mintToken function in a CM Ethereum token smart contract. Affected component: the CM token’s smart contract code. Root cause: integer overflow in mintToken that allows the contract owner to set the balance of an arbitrary address. Impact: potential manipulation of toke...

Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearQuest (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)

Summary IBM HTTP Server IHS is shipped as a component of IBM Rational ClearQuest. Information about security vulnerabilities affecting IHS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section. Affected Products an...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Rational ClearQuest

Summary IBM WebSphere Application Server is shipped as a component of IBM Rational ClearQuest. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details | Subscribe to My Notifications to be notified of...

cm-boticas.pt XSS vulnerability

Open Bug Bounty ID: OBB-626040 Description| Value ---|--- Affected Website:| cm-boticas.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-covilha.pt XSS vulnerability

Open Bug Bounty ID: OBB-622473 Description| Value ---|--- Affected Website:| cm-covilha.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-condeixa.pt XSS vulnerability

Open Bug Bounty ID: OBB-611686 Description| Value ---|--- Affected Website:| cm-condeixa.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Xxe

Multiple XML external entity XXE vulnerabilities in 1 CQWeb / CM Server, 2 ClearQuest Native client, 3 ClearQuest Eclipse client, and 4 ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1....

cm-montalegre.pt XSS vulnerability

Open Bug Bounty ID: OBB-603649 Description| Value ---|--- Affected Website:| cm-montalegre.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-gois.pt XSS vulnerability

Open Bug Bounty ID: OBB-603592 Description| Value ---|--- Affected Website:| cm-gois.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Windows Kernel 64-bit pool memory disclosure via REG_RESOURCE_REQUIREMENTS_LIST registry values(CVE-2018-0900)

We have discovered a Windows kernel memory disclosure vulnerability through the contents of "FilteredConfigVector" registry values of type REGRESOURCEREQUIREMENTSLIST, which can be found under HKLM\SYSTEM\CurrentControlSet\Enum\ACPI\\Control\FilteredConfigVector. The vulnerability affects 64-bit...

cm-consulting.ch XSS vulnerability

Open Bug Bounty ID: OBB-582318 Description| Value ---|--- Affected Website:| cm-consulting.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-gois.pt XSS vulnerability

Open Bug Bounty ID: OBB-575944 Description| Value ---|--- Affected Website:| cm-gois.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-oaz.pt XSS vulnerability

Open Bug Bounty ID: OBB-565849 Description| Value ---|--- Affected Website:| cm-oaz.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-serpa.pt XSS vulnerability

Open Bug Bounty ID: OBB-557330 Description| Value ---|--- Affected Website:| cm-serpa.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www4.cm-seixal.pt Open Redirect vulnerability

Open Bug Bounty ID: OBB-549539 Description| Value ---|--- Affected Website:| www4.cm-seixal.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure...