CVE-2016-6038: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure aka LWI, as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL...

PT-2016-5321

Name of the Vulnerable Software and Affected Versions IBM Connections versions 4.x through 4.5 CR5 IBM Connections versions 5.0 before CR4 IBM Connections versions 5.5 before CR1 Description The issue affects the help service, allowing remote authenticated users to cause service degradation via a...

Vulnerability in Tivoli LWI impacts pConsole and WebSM for AIX

pconsoleadvisory.asc: Version 2 Version 2 Issued: Fri Sep 30 14:51:49 CDT 2016 Version 2 Changes: iFixes added for the latest, impacted, supported AIX TLs. IBM SECURITY ADVISORY First Issued: Thu Sep 22 16:13:43 CDT 2016 |Updated: Fri Sep 30 14:51:49 CDT 2016 |Update: iFixes added for the latest,...

Single Sign on Support for Linux Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Question The client wants to achieve authenticated access to XenApp/XenDesktop infrastructure via...

PT-2016-6759

Name of the Vulnerable Software and Affected Versions IBM Tivoli Lightweight Infrastructure LWI versions in AIX 5.3, 6.1, and 7.1 IBM System Director Console for AIX pconsole affected versions not specified Web Based System Management Remote Client WebSM Remote affected versions not specified...

CVE-2016-3889

Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism by accessing 1 an external tile from a system application, 2 the help feature, or 3 the Settings application during a pre-setup stage, aka...

Design/Logic Flaw

Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism by accessing 1 an external tile from a system application, 2 the help feature, or 3 the Settings application during a pre-setup stage, aka...

Error: "Cannot Start App. Please contact your help desk." When Launching App Through Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The following error is displayed when launching app through Receiver: Cannot Start App. Please conta...

nuance.custhelp.com XSS vulnerability

Vulnerable URL: http://nuance.custhelp.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

toyota.custhelp.com XSS vulnerability

Vulnerable URL: https://toyota.custhelp.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253Dx%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2016-3545

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens...

CVE-2016-3545

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens...

CVE-2016-3545

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens...

CVE-2016-3545

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens...

CVE-2016-3545

Affected product: Oracle E-Business Suite (Applications Object Library, AOL) in 12.1.3, 12.2.3, 12.2.4, 12.2.5. Vulnerability: Web-based help screens subcomponent allows remote disclosure of confidential data. Root cause details are not specified in the provided documents. Publicly known remediat...

Win10 - Receiver4.3: Runtime Error for Wfica32.exe when launching app

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Runtime Error for Wfica32.exe when launching app...

PT-2016-5564

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, and 12.2.5 Description The issue affects confidentiality and is related to web-based help screens. Recommendations For versions 12.1.3, 12.2.3, 12.2.4, and 12.2.5, at the moment, there i...

CVE-2016-3545: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens...

Oracle E-Business Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2016 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Wireless Framework subcomponent within the CRM Technical Foundation component that...