CVE-2016-6655

CVE-2016-6655 affects Cloud Foundry Foundation Cloud Foundry releases prior to v245 and cf-mysql-release prior to v31. A command injection vulnerability exists in a common script used by many Cloud Foundry components, enabling a malicious user to execute arbitrary commands on affected servers. Th...

Update Rollup 12 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 12 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 12 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. It also contains the installation instructions fo...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: Please reference CVE/URL list for details...

humboldt-foundation.de XSS vulnerability

Vulnerable URL: https://www.humboldt-foundation.de/web/wtshow.search?plang=deform=0buttonhidden=searchflag=webid=102search=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3D%22y%22+onerror%3Dalert%28%2Fopenbugbounty%2F%29%3Ebutton=Sucheoperator=AND Details: Description| Value ---|--- Patched:| No Latest chec...

About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

The vulnerabilities in Microsoft Word, Skype for Business, Microsoft Office, Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft Office Web Apps, and Office Online Server allow attackers to execute arbitrary code.

The vulnerabilities of Microsoft Word, Skype for Business, Microsoft Office, Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft Office Web Apps, and Office Online Server are related to improper data processing. Exploiting these vulnerabilities allows a malicious actor to...

Code injection

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

EFF Sues DOJ Over National Security Letter Disclosure Rules

The Electronic Frontier Foundation sued the United States Department of Justice Wednesday demanding to know whether the agency is complying with rules that mandate a periodic review of National Security Letter gag orders. The suit, filed in U.S. District Court for the Northern District of...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

IBM Cognos Business Intelligence Server Predictive Solutions Foundation Information Disclosure Vulnerability

IBM Cognos Business Intelligence Server is a suite of business intelligence and performance management solutions from IBM in the United States. The solution reports, analyzes, monitors, and evaluates business data.Predictive Solutions Foundation formerly known as PMQ is one of the cloud-based ass...

The Journey to Hijacking a Country’s TLD – The Hidden Risks of Domain Extensions

I will liken him to a wise man, who built his house on a rock. The rain came down, the floods came, and the winds blew, and beat on that house; and it didn’t fall, for it was founded on the rock. Everyone who hears these words of mine, and doesn’t do them will be like a foolish man, who built his...

Mozilla Network Security Services Denial of Service Vulnerability (CNVD-2017-11837)

Mozilla Network Security Services NSS is the United States Mozilla Foundation developed a library network security services library, it can provide cross-platform support for SSL, S/MIME and other Internet security standards. Mozilla Network Security Services is prone to a denial of service...

Multiple Apple Products Foundation Component Memory Corruption Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system. foundation is a framework that provides basic system services for all applications. A memory corruption vulnerability exists in the Foundation component of...

Information Disclosure Vulnerability in Multiple IBM Products (CNVD-2017-07517)

IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management solution from IBM. IBM Rational Quality Manager RQM is a set of IBM's collaborative, Web-based quality management solutions. jazz Foundation is one of the software development collaboration platform. An...

CVE-2017-2523

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2017-2522

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2017-2522

CVE-2017-2522 concerns memory corruption in Apple’s CoreFoundation. The initial description confirms that iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2 are affected by a vulnerability in CoreFoundation that allows remote attackers to execute arbitrary code ...