Pepperl+Fuchs WirelessHART-Gateway

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Pepperl+Fuchs Equipment: WirelessHART-Gateway Vulnerabilities: Use of Hard-coded Credentials, Uncontrolled Resource Consumption, Reliance on Reverse DNS Resolution for a Security-critical Action, Path...

jQuery 3.0.0-rc1 DoS Vulnerability

jQuery is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jquery:jquery"; if...

Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities

Summary IBM Security Privileged Identity Manager has addressed the following security vulnerabilities. Vulnerability Details CVEID: CVE-2012-6708 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the jQuerystrInput function. A remot...

org.webjars.npm:addel (=1.3.1), org.webjars.npm:angular-chosen-localytics (=1.4.0) +36 more potentially affected by CVE-2016-10707 via org.webjars.npm:jquery (=3.0.0-rc1)

org.webjars.npm:jquery MAVEN version =3.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jquery and may be impacted: - org.webjars.npm:addel =1.3.1 - org.webjars.npm:angular-chosen-localytics =1.4.0 -...

CVE-2016-10707

The connected IBM CP4S security bulletin documents CVE-2016-10707 affecting jQuery 3.0.0-rc.1, describing a DoS via infinite recursion when attribute getters use mixed-case booleans. The CP4S advisory lists CP4S versions affected (1.8.1.0, 1.8.0.0, 1.7.2.0) and instructs upgrading to CP4S 1.9.0.0...