Cross site scripting

IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208404...

CVE-2021-38876

IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208404...

CVE-2021-38876

CVE-2021-38876 affects IBM i 7.2, 7.3, and 7.4. A cross-site scripting vulnerability in the IBM Navigator for i Web UI could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The issue is addressed by IBM with platform-specifi...

IBM i Cross-Site Scripting Vulnerability

IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A cross-site scripting vulnerability exists in IBM i. The vulnerability stems from the product not validating user-supplied data. An attacker could exploit the vulnerability to...

IBM i 跨站脚本漏洞

IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A cross-site scripting vulnerability exists in IBM i. The vulnerability stems from the product not validating user-supplied data. An attacker could exploit the vulnerability to...

Security Bulletin: IBM Navigator for i is affected by security vulnerability (CVE-2021-38876)

Summary IBM Navigator for i heritage version is vulnerable to the issue described in the vulnerability details section. IBM i has addressed the applicable CVE as described in the remediation/fixes section. Vulnerability Details CVEID: CVE-2021-38876 DESCRIPTION: IBM i is vulnerable to cross-site...

Security Bulletin: BIND for IBM i is affected by CVE-2021-25219

Summary The IBM i DNS Server implementation uses ISC BIND. IBM i has addressed the applicable CVE with a fix. Vulnerability Details CVEID: CVE-2021-25219 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a flaw in response processing. By abusing a lame cache, an attacker could...

selinux-policy bug fix and enhancement update

An update is available for selinux-policy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The selinux-policy packages contain the rules that govern how confined...

Invalid I/O Calculation

golang-1.15:sid is vulnerable to Invalid I/O Calculation. The attack is possible when a Go program running on a Unix system is out of file descriptors and calls syscall.ForkExec and its can close file descriptor 0 when it fails, its misdirected the I/O such as writing network traffic intended for...

i-san.co.kr Cross Site Scripting vulnerability OBB-2297142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Accops HyWorks Windows Client Integer Overflow Vulnerability

Accops HyWorks is a suite of solutions consisting of software and hardware from Accops India. It is used for instant and secure remote access to enterprise applications from anywhere, on any device and from any network. An integer overflow vulnerability exists in the Accops HyWorks Windows Client...

NoMachine Enterprise Client Buffer Overflow Vulnerability

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. A security vulnerability exists in NoMachine Enterprise Client, which can be exploited by attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted...

Amzetta Technologies AmZetta zPortal DVM Integer Overflow Vulnerability

Amzetta Technologies Amzetta Zportal is a virtual desktop and application controller from Amzetta Technologies, Inc. It is used by administrators to create and manage hosted applications, virtual desktops, shared hosted desktops, and auditing services, provide resources for virtual desktops, prox...

Electronic Team Donglify Integer Overflow Vulnerability

Electronic Team Donglify is an application from Electronic Team, Inc. that shares Usb security keys over the Internet. an integer overflow vulnerability exists in Electronic Team Donglify, which can be exploited by attackers to execute arbitrary code in kernel mode or via specially crafted I/O...

Amzetta Technologies Amzetta zPortal Windows zClient integer overflow vulnerability

Amzetta Technologies Amzetta Zportal is a virtual desktop and application controller from Amzetta Technologies, Inc. It is used by administrators to create and manage hosted applications, virtual desktops, shared hosted desktops, and auditing services, provide resources for virtual desktops, prox...

NoMachine Enterprise Desktop integer overflow vulnerability

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. NoMachine Enterprise Desktop suffers from a security vulnerability that could be exploited by attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially...

FlexiHub For Windows Integer Overflow Vulnerability

FlexiHub is a shared and accessible remote device from the FlexiHub team. FlexiHub For Windows is vulnerable to an integer overflow vulnerability that could be exploited by an attacker to execute arbitrary code in kernel mode or cause a denial of service via a specially crafted I/O request packet...

go -- multiple vulnerabilities

The Go project reports: net/http: limit growth of header canonicalization cache. An attacker can cause unbounded memory growth in a Go server accepting HTTP/2 requests. syscall: don’t close fd 0 on ForkExec error. When a Go program running on a Unix system is out of file descriptors and calls...

Amzetta Technologies Amzetta zPortal DVM Buffer Overflow Vulnerability

Amzetta Technologies Amzetta Zportal is a virtual desktop and application controller from Amzetta Technologies, Inc. It is used by administrators to create and manage hosted applications, virtual desktops, shared hosted desktops, and auditing services, provide resources for virtual desktops, prox...

Amazon WorkSpaces Buffer Overflow Vulnerability

Amazon WorkSpaces is a fully managed persistent desktop virtualization service from Amazon that lets your users access the data, applications, and resources they need from any supported device, anywhere, anytime. Amazon WorkSpaces is vulnerable to a buffer overflow vulnerability that could be...