CVE-2017-1338: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-0691

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1276

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

Input validation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756...

CVE-2017-1247

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1276

CVE-2017-1276 affects IBM DOORS Next Generation (DNG/RRC) Web UI for versions 4.0, 5.0 and 6.0, enabling cross-site scripting via embedded JavaScript that can lead to credentials disclosure in a trusted session. Root cause is XSS in the web interface. Affected products/versions are listed in IBM ...

CVE-2017-1276

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1278

IBM DOORS Next Generation (DNG/RRC) versions 4.0–6.0 are affected by an HTML injection vulnerability that allows a remote attacker to inject HTML executed in the victim’s browser within the hosting site context. Affected products include Rational DOORS Next Generation 6.0–6.0.3 and Rational Requi...

CVE-2017-1247

CVE-2017-1247 affects IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0. The weakness is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The IBM Security Bulletin confir...

CVE-2017-1247

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1276: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

CVE-2017-1278: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

CVE-2017-1305

IBM DOORS Next Generation DNG/RRC 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

CVE-2017-1305

IBM DOORS Next Generation (DNG/RRC) 6.0.2–6.0.3 is affected by a cross-site scripting vulnerability in the Web UI that can allow arbitrary JavaScript and potentially lead to credentials disclosure within a trusted session. Mitigation: upgrade to 6.0.3 iFix005 or later (or 6.0.2 iFix011 or later).

CVE-2017-1305

IBM DOORS Next Generation DNG/RRC 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

CVE-2017-1305: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

The vulnerability of the Raw-image converter to DNG format allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Raw-image conversion to DNG format in DNG Converter arises from the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure due to a memory corruption...