4725 matches found
Fedora 28 : 1:gdm (2018-6740c38cf4)
gdm 3.28.3 release, fixing CVE-2018-14424. - CVE-2018-14424 - double free fix - lifecycle fixes to libgdm/GdmClient - follow up fixes dealing with login screen reaping form last release - allow pam modules to use SIGUSR1 - set PWD for user session - tell cirrus not to use wayland - Translation...
Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM Security Key Lifecycle Manager October 2018 CPU
Summary There are multiple vulnerabiltities in the IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server. WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager. Vulnerability Details Please consult the security bulletin...
Notice of Change Announcement for Citrix ADC SDX 22100, SDX 22120, SDX 24100, and SDX 24150
Note: 22xxx/24xxx upgrade SKUs and 22xxx/24xxxZ upgrade SKUs for these models will be available until the year before EOL Citrix Systems, Inc. announces a Notice of Status Change for the Citrix ADC NetScaler MPX 22040, MPX 22060, MPX 22080, MPX 22100, MPX 22120 MPX 24100, MPX 24150, SDX 22040, SD...
Additional Lifecycle Information for StoreFront
This article is a supplement to the Non-Sale ProductsLifecycle information StoreFront is an integral component of Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop but can be used with several versions of Citrix Virtual Apps and Desktops and XenApp and XenDesktop. For customers that...
Security Bulletin: Detailed Error Messages are Revealed in IBM Emptoris Supplier Lifecycle Management
Summary IBM Emptoris Supplier Lifecycle Management product reveals detailed error messages in certain features. Vulnerability Details CVEID: CVE-2018-1942 DESCRIPTION: IBM Emptoris Supplier Lifecycle Management could disclose highly sensitive information in detailed error messages. CVSS Base Scor...
Security Bulletin: Multiple Vulnerabilities in IBM Java SDK Affect IBM Emptoris Strategic Supply Management Suite of Products and IBM Emptoris Services Procurement
Summary The IBM Emptoris Strategic Supply Management suite of products are affected by multiple security vulnerabilities that exist in the IBM SDK Java Technology Edition that is shipped with IBM WebSphere Application Server. The security bulletin includes issues that were disclosed as part of th...
CVE-2018-18339
Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2018-17481
Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...
CVE-2018-18336
Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...
Design/Logic Flaw
Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2018-18336
CVE-2018-18336 is a use-after-free in the PDFium component of Chromium/Google Chrome prior to version 71.0.3578.80, enabling potential heap corruption via a crafted PDF file. The Arch Linux security advisory ASA-201812-2 (and Debian/DSA-4352-1 apart from other sources) confirm the issue and state...
Security Bulletins for Emptoris Supplier Lifecycle Management
Question Security Bulletins for Emptoris Supplier Lifecycle Management Answer This article tracks all Security Bulletins for Emptoris Supplier Lifecycle Management. IBM's Product Security Incident Response Team PSIRT follows the NIST guidelines for determining the severity rating of the reported...
CISO series: Secure your privileged administrative accounts with a phased roadmap
In my role, I often meet with CISOs and security architects who are updating their security strategy to meet the challenges of continuously evolving attacker techniques and cloud platforms. A frequent topic is prioritizing security for their highest value assets, both the assets that have the mos...
CVE-2018-1762
IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2018-1762
The CVE-2018-1762 issue affects IBM Rational CLM and related Jazz-based products (CLM 5.0–5.0.2 and 6.0–6.0.6; QA Manager, Team Concert, DOORS NG, RQM, Rhapsody DM, RSA DM, and others) where a cross-site scripting vulnerability in the Web UI allows an attacker to inject arbitrary JavaScript, pote...
Cross site scripting
IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2018-1762
IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
PT-2018-14092
Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering...
CVE-2018-1762: Improper Neutralization of Input During Web Page Generation
IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...