Information disclosure

IBM WebSphere Message Broker IBM Integration Bus 9.0 and 10.0 could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341...

CVE-2017-1126

IBM WebSphere Message Broker IBM Integration Bus 9.0 and 10.0 could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341...

CVE-2017-1162

IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 122957...

CVE-2017-1377

IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874...

ISC BIND Security Bypass Vulnerability (CNVD-2017-12537)

BIND is an open source implementation of the DNS Domain Name System protocol that contains all the software needed to query and respond to domain names. It is the most widely used type of DNS server on the Internet. A security bypass vulnerability exists in ISC BIND. An attacker can exploit this...

IBM QRadar SIEM Security Bypass Vulnerability

IBM QRadar SIEM consolidates log event and network flow data from thousands of devices, endpoints and applications scattered across the network. IBM QRadar SIEM is prone to a security bypass vulnerability. An attacker could exploit this vulnerability to bypass security restrictions and perform...

SAP NetWeaver Information Disclosure Vulnerability (CNVD-2017-14354)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver, which can be exploited by attackers to obtain...

IBM API Connect Information Disclosure Vulnerability

IBM API Connect is a suite of integrated solutions for managing the API lifecycle and IBM NPM is a suite of NodeJS package management and distribution tools. An information disclosure vulnerability exists in IBM API Connect. A remote attacker could exploit this vulnerability to obtain sensitive...

OpenVPN Access Server CRLF Injection Vulnerability

OpenVPN is a software package from the American company OpenVPN for creating encrypted tunnels for virtual private networks VPNs that use the OpenSSL library to encrypt data and control information.OpenVPN Access Server is a commercial paid version of OpenVPN. OpenVPN Access Server suffers from a...

Red Hat spacewalk-backend security bypass vulnerability

spacewalk is an open source free linux system management solution. It can be used to manage system information , install and update the software in the system , collect and distribute customized packages in the system to manageable groups , provide and manage configuration files in the system and...

Flexera Software FlexNet Manager Suite Local Elevation of Privilege Vulnerability

FlexNet Manager Suite is a comprehensive and proven next-generation hardware asset management, software asset management, certificate compliance and software certificate optimization solution from Flexera Software, USA. A local elevation of privilege vulnerability exists in Flexera Software FlexN...

Cross-Site Scripting Vulnerability in Multiple IBM Products

IBM QRadar Security Information and Event Manager SIEM is a U.S.-based IBM solution that consolidates log-sourced event data from thousands of devices and applications dispersed throughout the network. A cross-site scripting vulnerability exists in multiple IBM products. An attacker could exploit...

Zurmo CRM Cross-Site Scripting Vulnerability (CNVD-2017-08089)

Zurmo CRM is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. Zurmo CRM suffers from a cross-site scripting attack vulnerability that stems from the program failing to adequately validate user input. An attacker could use this vulnerabili...

Apple macOS Server User Enumeration Vulnerability

Apple Mac OS X is a specialized operating system developed by Apple for Mac computers. A user enumeration vulnerability exists in Apple macOS Server. An attacker exploits this vulnerability to obtain a valid username and launch further attacks...

Nextcloud Unauthorized Access Vulnerability

Nextcloud is a suite of open source self-hosted file synchronization and sharing communication application platform. An unauthorized access vulnerability exists in Nextcloud. An attacker could use this vulnerability to bypass certain security restrictions and obtain sensitive information, leading...

SAP SNOTE Unauthorized Operation Vulnerability

SAP Notes is an SAP knowledge base from SAP, Germany, which is a solution provided by SAP for a specific problem, operation, or configuration, and is made available to the customer in the form of a document. An unspecified security vulnerability exists in SAP SNOTE. An attacker could exploit this...

Google Pixel/Pixel XL Qualcomm USB Driver Information Disclosure Vulnerability

Google Pixel/Pixel XL are both a smartphone from the American company Google Google. Google Pixel/Pixel XL suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to gain access to potentially sensitive information, leading to further attacks...

CVE-2017-7474

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks...

Advantech B + B SmartWorx MESR901 Authentication Bypass Vulnerability

Advantech B + B SmartWorx MESR901 is a Modbus gateway. An authentication bypass vulnerability exists in Advantech B + B SmartWorx MESR901. An attacker can exploit the vulnerability to carry out authentication mechanisms and perform unauthorized operations, leading to further attacks...

Nextcloud Server Content Spoofing Vulnerability (CNVD-2017-05596)

Nextcloud is a suite of open source self-hosted file synchronization and sharing communication application platform. A content spoofing vulnerability exists in Nextcloud Server. An attacker could exploit this issue to manipulate and spoof content, which could facilitate further attacks...