SQL Injection Vulnerability in DM Enterprise Website System

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM enterprise website builder system multiple parameters exist SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive...

CVE-2016-8975

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118912...

Cross site scripting

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118912...

CVE-2016-8975

IBM Rhapsody DM 5.0–6.0 is affected by a cross‑site scripting vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. The issue arises from improper input handling in the Web UI, enabling arbitrary JavaScript execution. Remediation per the IBM bulletins is to...

CVE-2016-8975

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118912...

CVE-2017-1287

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...

CVE-2017-1287

CVE-2017-1287 affects IBM Rhapsody DM 5.0.0–5.0.2 and 6.0–6.0.3, where a remote attacker can exploit an open redirect to conduct phishing by persuading a user to visit a crafted site, spoofing the URL to lead to a trusted-appearing malicious site. The impact described includes potential access to...

CVE-2017-1249

IBM Rhapsody DM is affected by a cross-site scripting vulnerability (CVE-2017-1249) in Web UI. Affected products/version ranges: Rational Rhapsody Design Manager 5.0.0–5.0.2 and 6.0–6.0.3 (6.0.4+ not affected). Root cause: XSS in the Web UI that could lead to credentials disclosure within a trust...

CVE-2017-1287: URL Redirection to Untrusted Site

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...

CVE-2016-8975: Improper Neutralization of Input During Web Page Generation

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118912...

CVE-2017-1249: Improper Neutralization of Input During Web Page Generation

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2017-12739

Name of the Vulnerable Software and Affected Versions IBM Rhapsody DM versions 5.0 through 6.0 Description The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, the attacker could exploit this to...

SQL Injection Vulnerability in DM Enterprise Building System Search Function

DM building station is a set of open source cms developed by php + mysql. DM enterprise building system search function exists SQL injection vulnerability. Attackers can use the vulnerability to obtain database sensitive information...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0121)

The remote OracleVM system is missing necessary patches to address critical security updates : - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366024 CVE-2017-7645 - dm mpath: allow ioctls to trigger pg init Mikulas Patocka Orabug: 25645229 - xen/manage: Always freeze/tha...

Unbreakable Enterprise kernel security update

2.6.39-400.297.3 - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366024 CVE-2017-7645 2.6.39-400.297.2 - dm mpath: allow ioctls to trigger pg init Mikulas Patocka Orabug: 25645229 - xen/manage: Always freeze/thaw processes when suspend/resuming Ross Lagerwall Orabug:...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-734) (Stack Clash)

The openSUSE Leap 42.2 kernel was updated to 4.4.73 to receive security and bugfixes. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped'...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to 4.4.73 to receive security and bugfixes. The following security bugs were fixed: - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped"...

CVE-2016-9698

IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference...

Xxe

IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference...

CVE-2016-9698

IBM Rhapsody DM is affected by CVE-2016-9698 due to an XML External Entity (XXE) processing flaw that can lead to denial of service and potential memory/resource exhaustion. Affected: Rational Software Architect/Design Manager versions 4.0.0–4.0.7, 5.0.0–5.0.2, and 6.0.0–6.0.2. Root cause: XXE in...