6482 matches found
CVE-2015-7398
Cross-site scripting XSS vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a...
CVE-2015-5042: Improper Input Validation
IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file...
PT-2016-3664
Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management versions 9.5.0.x through 9.5.0.5, IBM Emptoris Contract Management versions 10.0.0.x through 10.0.1.4, IBM Emptoris Contract Management versions 10.0.2.x through 10.0.2.6, IBM Emptoris Contract Management versi...
PT-2016-3755
Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management versions 9.5.0.x through 9.5.0.5, IBM Emptoris Contract Management versions 10.0.0.x through 10.0.1.4, IBM Emptoris Contract Management versions 10.0.2.x through 10.0.2.6, IBM Emptoris Contract Management versi...
CVE-2015-7398: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a...
PT-2016-3666
Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management versions 9.5.0.x through 9.5.0.5 IBM Emptoris Contract Management versions 10.0.0.x through 10.0.1.4 IBM Emptoris Contract Management versions 10.0.2.x through 10.0.2.6 IBM Emptoris Contract Management version...
CVE-2015-5050: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote authenticated users to hijack the authentication of...
Bitcoin Creator 'Satoshi Nakamoto' Unmasked! An Australian Man 'Craig Wright' identified...
Breaking Update: Police Raid alleged Bitcoin Creator Craig Wright's Home in Sydney. Yes, Satoshi Nakamoto, the mysterious creator of the Bitcoin digital cryptocurrency has possibly been identified as an Australian entrepreneur, according to investigations independently done by Wired and Gizmodo...
Threat Outbreak Alert RuleID19854: Email Messages Distributing Malicious Software on December 7, 2015
Medium Alert ID: 42484 First Published: 2015 December 3 14:04 GMT Last Updated: 2015 December 9 13:35 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19854...
OPM Hack Victims Still Haven't Been Notified
Millions of government workers whose information was implicated in this year’s expansive Office of Personnel Management hack still haven’t been notified, the agency revealed this week. The agency announced Tuesday that it would contact 21.5 million federal employees and contractors “later this...
Junos Operating System On Extended Support
According to its version, the remote Junos operating system has transitioned to an extended portion in its support life cycle. Continued access to new security updates requires a support service contract; without one, the host likely will be missing security updates. C Tenable Network Security,...
Threat Outbreak Alert RuleID16746: Email Messages Distributing Malicious Software on July 17, 2015
Medium Alert ID: 40022 First Published: 2015 July 17 20:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16746 may contain the following files: Name | Siz...
ManageEngine Asset Explorer v6.1 - Persistent Vulnerability
Document Title: =============== ManageEngine Asset Explorer v6.1 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1488 Release Date: ============= 2015-06-22 Vulnerability Laboratory ID VL-ID: ===================================...
ManageEngine Asset Explorer v6.1 - Persistent Vulnerability
Document Title: =============== ManageEngine Asset Explorer v6.1 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1488 Release Date: ============= 2015-06-22 Vulnerability Laboratory ID VL-ID: ===================================...
SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities
Exploit for multiple platform in category web applications Document Title: =============== SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities Product & Service Introduction: =============================== The integrated customer management, digital customer file is the central record for a sing...
XML External Entity Information Disclosure Vulnerability in Multiple IBM Products
IBM Emptoris Contract Management software is a solution that automates the contract lifecycle. An XML external entity information disclosure vulnerability exists in multiple IBM products, which can be exploited by attackers to access sensitive information...
Xxe
The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix2, 10.0.0.x before 10.0.0.1 iFix1, 10.0.1.x before 10.0.1.3 iFix1, and 10.0.2...
PT-2015-3839
Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management versions 9.5.x through 9.5.0.5, 10.0.0.x through 10.0.0.0, 10.0.1.x through 10.0.1.4, and 10.0.2.x through 10.0.2.1 IBM Emptoris Sourcing versions 9.5 through 9.5.1.2, 10.0.0.x through 10.0.0.0, 10.0.1.x throug...
CVE-2014-6212: Undefined Security Weakness
The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix2, 10.0.0.x before 10.0.0.1 iFix1, 10.0.1.x before 10.0.1.3 iFix1, and 10.0.2...
