IBM InfoSphere Master Data Management Collaborative Edition Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative Edition. A remote attacker could exploit this...

Debian Security Advisory DSA 3518-1 (spip - security update)

Several vulnerabilities were found in SPIP, a website engine for publishing, resulting in code injection. CVE-2016-3153 g0uZ et sambecks, from team root-me, discovered that arbitrary PHP code could be injected when adding content. CVE-2016-3154 Gilles Vincent discovered that deserializing untrust...

CVE-2015-4960

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

Information disclosure

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 does not properly restrict browser caching, which allows local users to obtain sensitive information by reading cache files...

CVE-2015-4958

CVE-2015-4958 affects IBM InfoSphere Master Data Management Collaborative Edition (MDM CE) 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1. The issue is that browser caching is not properly restricted, allowing local users to read cached files and obta...

CVE-2015-4960

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

IBM InfoSphere Master Data Management - Collaborative Edition Information Disclosure Vulnerability

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of solutions that provide collaborative editing for Product Information Management PIM. A security vulnerability in IBM InfoSphere MDM - Collaborative Edition allows local attackers to exploit the vulnerability to obtain...

IBM InfoSphere Master Data Management - Collaborative Edition Point Hijacking Vulnerability

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of solutions that provide collaborative editing for Product Information Management PIM. A point-and-click hijacking vulnerability exists in IBM InfoSphere MDM - Collaborative Edition, which allows an attacker to construc...

IBM Rational Collaborative Lifecycle Management Denial of Service Vulnerability

IBM Rational Collaborative Lifecycle Management is a collaborative lifecycle management solution from IBM USA. A denial of service vulnerability exists in IBM Rational Collaborative Lifecycle Management. Allows an attacker to cause a denial of service attack by exploiting unspecified vectors...

IBM Rational Collaborative Lifecycle Management Clickjacking Vulnerability

IBM Rational Collaborative Lifecycle Management is a collaborative lifecycle management solution from IBM USA. A clickjacking vulnerability exists in IBM Rational Collaborative Lifecycle Management. Allows remote attackers to conduct clickjacking attacks via a carefully constructed site...

IBM Rational Collaborative Lifecycle Management Security Bypass Vulnerability

IBM Rational Collaborative Lifecycle Management is a collaborative lifecycle management solution from IBM USA. A security bypass vulnerability exists in IBM Rational Collaborative Lifecycle Management. It allows local users to bypass security access restrictions by utilizing unspecified vectors...

CVE-2015-4946

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x...

CVE-2015-4962

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Team...

CVE-2015-4946

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x...

CVE-2015-1971

Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Te...

Design/Logic Flaw

Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Te...

CVE-2015-1971

Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Te...

CVE-2015-1928

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4;...

SQL Injection Vulnerability in Panmicro Collaborative Business System

Panavision Collaborative Business System is a complete enterprise collaborative work platform. A SQL injection vulnerability exists in the full version of Panmicro Collaborative Business System, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro Collaborative Business System

Panavision Collaborative Business System is a complete enterprise collaborative work platform. A SQL injection vulnerability exists in the typename and id parameters of the Panmicro Collaborative Business System. It allows attackers to exploit the vulnerability to gain access to sensitive...