Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI

Summary Websphere Application Server WAS is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Multiple Vulnerabilities in IBM® Java...

November 27, 2018—KB4467684 (OS Build 14393.2639)

None None...

zzzcms V1.5.7 php official version of the back-end code execution vulnerabilities exist

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. zzzcms V1.5.7 php official version of the background sa.php file editfile function there is a code execution vulnerability, an attacker can take advantage of the vulnerability to execute arbitrary co...

November 27, 2018—KB4467699 (OS Build 15063.1478)

None None...

CVE-2018-4277: a“pie”triggered spoofing-vulnerability warning-the black bar safety net

Researchers looking for the browser front-end security issues found in Chrome, Safari, Firefox and other browsers there is a security vulnerability. This article describes Apple products Alphabet d-shaped problems caused by domain spoofing problem. U+A771 The researchers found that Apple products...

PointOfSales SQL Injection Vulnerability

PointOfSales is a point of sale system. The system includes features such as inventory management, customer management and performance management. A SQL injection vulnerability exists in PointOfSales version 1.0. A remote attacker can exploit this vulnerability to view, add, modify, or delete...

BSEN Ordering software SQL Injection Vulnerability

BSEN Ordering software is a procurement management system. A SQL injection vulnerability exists in BSEN Ordering software version 1.0. A remote attacker can use the vulnerability to view, add, modify, or delete information in the back-end database with the help of the...

Curriculum Evaluation System SQL Injection Vulnerability

Curriculum Evaluation System is a curriculum evaluation system. A SQL injection vulnerability exists in Curriculum Evaluation System version 1.0. A remote attacker can use the login page to view, add, modify, or delete information in the back-end database...

CVE-2018-19287

XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the includes/Admin/Menus/Submissions.php aka submissions page begindate, enddate, or formid parameter...

Centreon SQL Injection Vulnerability

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A SQL injection...

Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US

No description provided...

KB5071812: Servicing stack update for Windows Server 2008 SP2: November 11, 2025

None None...

KB5071810: Servicing stack update for Windows Server 2008 R2 SP1: November 11, 2025

None None...

November 13, 2018—KB4467691 (OS Build 14393.2608) - EXPIRED

None None...

Intel® PROSet/Wireless WiFi Software Advisory

Summary: Multiple potential security vulnerabilities in Cisco Compatible eXtensions CCX component in Intel® PROSet/Wireless WiFi Software may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing PROSet/Wireless WiFi Software updates to mitigate this...

Kernel update: Virtuozzo ReadyKernel patch 66.0 for Virtuozzo 7.0.4 to 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported Virtuozzo kernels. NOTE: No more patches are planned for kernel 3.10.0-514.16.1.vz7.30.10, support for which ends with this update. Vulnerability id: PSBM-89050 cleancache: missing...

(RHSA-2018:3456) Low: Red Hat Satellite Server 5 - 90 day End Of Life Notice

The RHN service for Satellite 5.7, 5.6, and earlier versions of Satellite 5 will exit the existing Limited Maintenance Release phase and be permanently shut down on January 31, 2019. After this date, for the affected Satellite 5 versions: No content will be available from RHN. Both system level...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2018-1767)

Summary Websphere Application Server WAS is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Cross-site scripting vulnerability in...

F5 Networks BIG-IP : Lazy FP state restore vulnerability (K21344224)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K21344224 advisory. System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocesso...

Microsoft Windows 10 Version 1703 Unsupported Version Detection

Microsoft Windows 10 version 1703 is running on the remote host. Microsoft ended support for Windows 10 version 1703 Home/Pro on October 9, 2018 and ends for Windows 10 version 1703 Enterprise/Educational on October 8, 2019. Lack of support implies that no new security patches for the product wil...