CVE-2018-1658

IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6 is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrar...

CVE-2018-1688

Summary (CVE-2018-1688) IBM Jazz Foundation, used by CLM 5.0–6.0.6, is vulnerable to cross-site scripting in the Web UI, potentially allowing a trusted-session credential disclosure. The issue affects multiple CLM-related products built on IBM Jazz technology. Remediation is available via upgrade...

CVE-2018-1688

IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

CVE-2018-1658

CVE-2018-1658 affects IBM Jazz Foundation used by IBM CLM and related Rational products (CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM) 5.0–6.0.6. Root cause: HTTP header injection due to input validation issues in IBM Jazz Foundation. Impact: remote attacker can persuade a user to visit a craft...

Microsoft Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-24393))

Microsoft Team Foundation Server is the United States Microsoft Microsoft company's set of application lifecycle management ALM tool suite of team collaboration platform. The platform includes code management, project management and other features. A cross-site scripting vulnerability in Microsof...

“BreedReady” database of 1.8m Chinese women surfaced online

By Waqas Another day, another data breach; this time, Victor Gevers, a Dutch security researcher from GDI Foundation has discovered a publically exposed database containing a massive trove of highly sensitive data of millions of Chinese women. According to Gevers, the database which is open for...

Description of the security update for SharePoint Foundation 2013: March 12, 2019

Description of the security update for SharePoint Foundation 2013: March 12, 2019 Summary This security update resolves a cross-site-scripting XSS vulnerability if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn mo...

KLA11433 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A tampering vulnerability in NuGet Package Manager can be exploited remotely to spoo...

Microsoft Team Foundation Server CVE-2019-0777 Cross Site Scripting Vulnerability

Description Microsoft Team Foundation Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

Security Updates for Microsoft Team Foundation Server (March 2019)

The Microsoft Team Foundation Server installation on the remote host is missing a security update. It is, therefore, affected by a cross- site scripting XSS vulnerability that exists when Team Foundation Server does not properly sanitize user provided input. An authenticated attacker could exploi...

Videos and Links from the Public-Interest Technology Track at the RSA Conference

Yesterday at the RSA Conference, I gave a keynote talk about the role of public-interest technologists in cybersecurity. Video here. I also hosted a one-day mini-track on the topic. We had six panels, and they were all great. If you missed it live, we have videos: How Public Interest Technologist...

Fedora Update for drupal7 FEDORA-2019-82df33e428

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-0742

A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0743...

CVE-2019-0742

CVE-2019-0742 is a Cross-site Scripting (XSS) vulnerability in Microsoft Team Foundation Server (TFS) where input was not properly sanitized. Connected CNVD data specifies affected software as Microsoft Team Foundation Server 2018 Update version 3.2, with the root cause being failure to properly ...

CVE-2019-0743

Technical details (affected products/versions/root cause/impact/fix) for CVE-2019-0743 are not publicly available in the provided connected documents. Monitor for updates to external advisories and CVE records.

CVE-2019-0743

A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0742...

CVE-2019-0742

A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0743...

CVE-2019-0743

A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0742...

CVE-2019-0743

A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0742...

CVE-2019-0742

A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0743...