Cross-Site Scripting in third party library mso/idna-convert

It has been discovered, that TYPO3 ships example code of mso/idna-convert library that is vulnerable to Cross-Site Scripting Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.6.0 to 7.6.9 and 8.0.0 to 8.2.0 Severity: Low Suggested...

SAP Netweaver AS Java - XXE vulnerability in Visual Composer VC70RUNTIME

Application: SAP NetWeaver Versions Affected: SAP NetWeaver AS JAVA 7.5 Vendor URL: SAP Bugs: XXE Reported: 17.06.2016 Vendor response: 18.06.2016 Date of Public Advisory: 14.02.2017 Reference: SAP Security Note 2386873 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: XXE Impact:...

SAP NetWeaver Java 7.5 XXE

Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.5 Vendor URL: SAP Bugs: XXE Reported: 17.06.2016 Vendor response: 18.06.2016 Date of Public Advisory: 10.01.2017 Reference: SAP Security Note 2347439 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: XXE Impact: Denial of...

Multiple IBM Rational Products Privilege Acquisition Vulnerabilities

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions. Manager are collaborative lifecycle management...

Multiple IBM Rational Products Cross-Site Scripting Vulnerabilities

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions. Manager are collaborative lifecycle management...

CuteMIDI Composer Handles Mid File Memory Corruption Vulnerability

CuteMIDI Short Score Composer is a MIDI format authoring software. A memory corruption vulnerability exists in the software's handling of the MIDI format, which could be exploited by attackers to construct malformed MIDI format files that could cause the program to crash...

CVE-2015-4946

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x...

CVE-2015-4946

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x...

Design/Logic Flaw

Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Te...

CVE-2015-1971

Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Te...

PT-2016-3634

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1 IBM Rational Quality Manager RQM versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x throug...

PT-2016-3589

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 3.x through 4.x before 4.0.7 IF8 IBM Rational Collaborative Lifecycle Management CLM versions 5.x before 5.0.2 IF10 Rational Quality Manager RQM versions 2.x through 3.x before 3.0.1...

CVE-2015-4962: Exposure of Sensitive Information to an Unauthorized Actor

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Team...

PT-2016-3642

Name of the Vulnerable Software and Affected Versions Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM versions 3.x through 4.0.7 IF8, 5.x through 5.0.2 IF8, and 6.x before 6.0.1 Rational Quality Manager RQM versions 3.x through 3.0.1.6 IF6, 4.x through...

PT-2016-3588

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF10 and 6.x through 6.0.0 IF3 Rational Quality Manager RQM versions 3.x through 3.0.1.5 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0...

Phan - Static Analyzer For PHP

Phan is a static analyzer for PHP. Getting it running Phan requires PHP 7+ with the php-ast extension loaded. The code you analyze can be written for any version of PHP. To get phan running; 1. Clone the repo 2. Run composer install to load dependencies 3. Run ./test to run the test suite 4. Test...

WordPress Visual Composer Plugin <= 4.7.3 - Cross Site Scripting

This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the plugin...

Wordpress Crash Ultimate Addons for Visual Composer Vulnerability

Exploit for php platform in category web applications / + Exploit Title : Wordpress Crash Ultimate Addons for Visual Composer vulnerability + Exploit Author : Ashiyane Digital Security Team + Tested on : Windows - Firefox + Vendor Homepage :...

The vulnerability of the Mac OS X operating system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Quartz Composer Framework operating system on Mac OS X arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted QuickTime file...

Apple OS X Quartz Composer Framework Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability in the Apple OS X Quartz Composer Framework's handling of QuickTime files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by an application, whic...