EUVD-2017-10327

Malware in sbrugna...

EUVD-2017-10157

Malware in sbrugna...

Security Bulletin: IBM Insights Foundation for Energy could allow an authenticated user to obtain sensitive information from error messages (CVE-2017-1141)

Summary IBM Insights Foundation for Energy could allow an authenticated user to obtain sensitive information from error messages. Vulnerability Details CVEID:CVE-2017-1141 DESCRIPTION:IBM Insights Foundation for Energy could allow an authenticated user to obtain sensitive information from error...

CVE-2017-1342

IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...

Code injection

IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...

CVE-2017-1342

IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...

CVE-2017-1342

IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...

CVE-2017-1342

IBM Insights Foundation for Energy 2.0 is affected by a publicly documented information-disclosure vulnerability. An authenticated user could learn sensitive details from error messages, which could be leveraged to conduct further attacks. The exact root cause, affected versions, and remediation ...

CVE-2017-1342: Exposure of Sensitive Information to an Unauthorized Actor

IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...

IBM Insights Foundation for Energy Cross-Site Scripting Vulnerability

IBM Insights Foundation for Energy is a suite of energy analytics, data management and visualization solutions from IBM in the United States. A cross-site scripting vulnerability exists in IBM Insights Foundation for Energy version 2.0. A remote attacker can exploit this vulnerability to inject...

IBM Insights Foundation for Energy SQL Injection Vulnerability

IBM Insights Foundation for Energy is a suite of energy analytics, data management and visualization solutions from IBM in the United States. A SQL injection vulnerability exists in IBM Insights Foundation for Energy version 2.0. A remote attacker can exploit the vulnerability by sending speciall...

CVE-2017-1311

IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 125719...

CVE-2017-1345

IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126460...

Sql injection

IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 125719...

Cross site scripting

IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126460...

CVE-2017-1311: Improper Neutralization of Special Elements used in an SQL Command

IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 125719...

CVE-2017-1345: Improper Neutralization of Input During Web Page Generation

IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126460...

CVE-2017-1345

IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126460...

CVE-2017-1311

IBM Insights Foundation for Energy 2.0 is affected by a SQL injection vulnerability. A remote attacker can send specially crafted SQL statements to view, add, modify, or delete data in the back-end database. This is documented across multiple sources (e.g., NVD/NVD-derived entries and CNVD), whic...

CVE-2017-1345

The CVE-2017-1345 entry concerns IBM Insights Foundation for Energy 2.0, where a cross-site scripting vulnerability exists in the Web UI. The incident allows an attacker to inject arbitrary JavaScript into the Web UI, potentially altering functionality and leading to credentials disclosure within...