CVE-2016-8987

CVE-2016-8987 - IBM Maximo Asset Management could allow an authenticated user to view incorrect item sets they should not access. Affected core versions: Maximo Asset Management 7.6, 7.5, 7.1, plus related Industry Solutions (Maximo for Aviation, Life Sciences, Nuclear Power, Oil and Gas, Transpo...

PT-2017-9916

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 through 7.6 Description The issue allows an authenticated user to view incorrect item sets that they should not have access to view. Recommendations For versions 7.1 through 7.6, update to a version tha...

WebKit - enqueuePageshowEvent enqueuePopstateEvent Universal Cross-Site Scripting

WebKit - enqueuePageshowEvent enqueuePopstateEvent Universal Cross-Site Scripting view-frame.page; frame.tree.appendChildchildFrame-view-frame; childFrame-open; enqueuePageshowEventPageshowEventPersisted; HistoryItem historyItem = frame.loader.history.currentItem; if historyItem &&...

koraps.com XSS vulnerability

Vulnerable URL: http://koraps.com/shop/item.php?itid=325474...

Google Chrome List Item Marker Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Google Chrome. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

Authentication flaw

CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

PT-2017-7226

Name of the Vulnerable Software and Affected Versions TeamPass versions 2.1.24 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the label value of an item or the name of a role. This can lead to cross-site scripting XSS attacks. Recommendations...

PT-2017-17053

Name of the Vulnerable Software and Affected Versions radare2 version 1.2.1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted DEX file. This is due to a problem in the dex parse debug item...

radare2 denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'dexparsedebugitem' function in the libr/bin/p/bindex.c file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

How to rename items on StoreFront?

To rename items as per the requirement...

CVE-2016-6028

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view...

CVE-2016-6028

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view...

CVE-2016-6028

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view...

PT-2017-8852

Name of the Vulnerable Software and Affected Versions IBM Jazz technology based products affected versions not specified Description The issue allows an attacker to view work item titles that they do not have privilege to view. Recommendations At the moment, there is no information about a newer...

CVE-2016-6028: Undefined Security Weakness

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view...

SUSE-SU-2017:0346-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Oracle Critical Patch Update of January 2017 bsc1020905 Upgrade to version jdk8u121 icedtea 3.3.0: - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution...

Update Rollup 11 for System Center 2012 R2 Data Protection Manager

Update Rollup 11 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 11 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note We recommend that...

Update Rollup 10 for System Center 2012 R2 Data Protection Manager

Update Rollup 10 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 10 for Microsoft System Center 2012 R2 Data Protection Manager. Additionally, this article contains the installation instructions for this update. Note...