9286 matches found
tomcat -- information disclosure vulnerability
The Apache Software Foundation reports: Important: Information Disclosure CVE-2016-8745...
Cross-site scripting vulnerability in multiple IBM Rational products (CNVD-2016-13288)
IBM Rational Collaborative Lifecycle Management CLM, etc. are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager RELM are collaborative lifecycle management solutions; Rational DOORS Next Generation RDNG is a requirements...
Multiple IBM Rational product design vulnerabilities
IBM Rational Collaborative Lifecycle Management CLM, etc. are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager RELM are collaborative lifecycle management solutions; Rational DOORS Next Generation RDNG is a requirements...
Apache httpd -- several vulnerabilities
Apache Software Foundation reports: Please reference CVE/URL list for details...
Mac OS X 10.x < 10.12.2 Multiple Vulnerabilities
Binary data 9840.prm...
Apple macOS Sierra Foundation Component Memory Corruption Vulnerability
Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Foundation is one of the components that defines the Objective-C class base layer. A security vulnerability exists in the Foundation component in Apple macOS Sierra versions prior to 10.12.2. An attacker can...
Red Hat JBoss Enterprise Application Platform (EAP) Detection (HTTP)
HTTP based detection of the Red Hat JBoss Enterprise Application Platform EAP. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-8218: Unauthenticated JWT signing algorithm in routing | Cloud Foundry
CVE-2016-8218: Unauthenticated JWT signing algorithm in routing Critical Vendor Cloud Foundry Foundation Versions Affected routing-release versions prior to 0.142.0 cf-release versions 203 to 231 Description Incomplete validation logic in JSON Web Token JWT libraries can allow unprivileged...
Zurb Foundation tooltip plugin 'foundation.tooltip.js' cross-site scripting vulnerability
ZURB Foundation is an advanced front-end responsive framework. A cross-site scripting vulnerability exists in the 'tooltip' plugin for Zurb Foundation that stems from a failure to adequately validate user input. The vulnerability can be exploited to execute arbitrary script code on a user's brows...
FreeBSD : subversion -- Unrestricted XML entity expansion in mod_dontdothat and Subversionclients using http(s) (ac256985-b6a9-11e6-a3bf-206a8a720317)
The Apache Software Foundation reports : The moddontdothat module of subversion and subversion clients using https:// are vulnerable to a denial-of-service attack, caused by exponential XML entity expansion. The attack targets XML parsers causing targeted process to consume excessive amounts of...
CVE-2016-8223
During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges...
Privilege escalation
During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges...
CVE-2016-8223
During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges...
CVE-2016-8223
CVE-2016-8223 — Lenovo System Interface Foundation Privilege Escalation : A local privilege escalation exists in Lenovo System Interface Foundation on some Windows 10 PCs, where a user with local privileges can run arbitrary code with administrator privileges. The issue involves Lenovo System Int...
Zurb Foundation 5.5.3 / 5.5.1 Cross Site Scripting Vulnerability
Zurb Foundation versions 5.5.1 and 5.5.3 suffer from a cross site scripting vulnerability. XSS vulnerabilty in the tooltip plugin of Zurb Foundation 5.x ============================================================= URL to this advisory: https://nop.li/foundation5tooltipxss Vendor ======...
subversion -- Unrestricted XML entity expansion in mod_dontdothat and Subversionclients using http(s)
The Apache Software Foundation reports: The moddontdothat module of subversion and subversion clients using https:// are vulnerable to a denial-of-service attack, caused by exponential XML entity expansion. The attack targets XML parsers causing targeted process to consume excessive amounts of...
tomcat -- multiple vulnerabilities
The Apache Software Foundation reports: Important: Remote Code Execution CVE-2016-8735 Important: Information Disclosure CVE-2016-6816...
Vulnerabilities Identified in Network Time Protocol Daemon (ntpd)
The Network Time Foundation's NTP Project has released version ntp-4.2.8p9 to address multiple vulnerabilities in ntpd. Exploitation of some of these vulnerabilities may allow a remote attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to review...
Microsoft Joins The Linux Foundation — Turns Love Affair Into a Relationship
You won't believe your eyes while reading this, but this is true. Microsoft just joined the Linux Foundation as a high-paying Platinum member. Microsoft's love with open source community is embracing as time passes. At its first Connect event in 2013, the company launched Visual Studio 2013. A ye...