CVE-2019-12407

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive...

CVE-2019-10090

CVE-2019-10090 affects Apache JSPWiki up to version 2.11.0.M4. The vulnerability is an XSS flaw triggered by a crafted plugin link invocation related to the plain editor, allowing an attacker to execute JavaScript in the victim’s browser and potentially view sensitive information. The available c...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface (UEFI) (CVE-2015-0286 CVE-2015-0288 CVE-2015-0289 CVE-2015-0209 CVE-2015-0287)

Summary OpenSSL vulnerabilities were disclosed on March 19th, 2015 by the OpenSSL Project. OpenSSL is used by IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface UEFI. IBM System x, BladeCenter and Flex Systems UEFI have addressedthe applicable CVEs. Vulnerability...

Security Bulletin: IBM QRadar SIEM has released 7.3.1 Patch 4, and 7.2.8 Patch 13 in response to the vulnerabilities known as Spectre and Meltdown.

Summary IBM has released the following 7.3.1 Patch 4, and 7.2.8 Patch 13 for IBM QRadar SIEM in response to CVE-2017-5753, CVE-2017-5715 and CVE-2017-5754 Vulnerability Details CVEID: CVE-2017-5753 CVEID: CVE-2017-5715 CVEID: CVE-2017-5754 Affected Products and Versions IBM QRadar SIEM 7.3.0 –...

m4-tv.com XSS vulnerability

Open Bug Bounty ID: OBB-659636 Description| Value ---|--- Affected Website:| m4-tv.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Bulletin: IBM X Series hardware IMMv1, IMMv2 remote management ports as used by IBM QRadar SIEM appliances are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224)

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-ID: CVE-2014-0224 DESCRIPTION: OpenSSL is vulnerable to a man-in-the-middle attack, caused by the use of weak keying material in SSL/TLS clients an...

CVE-2017-6604

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System UCS...

Multiple packages, Multiple vulnerabilities fixed in 2010

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. Insight Perl Tk Module...

Design/Logic Flaw

Cisco IOS 15.24M4 on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service input-queue consumption and traffic-processing outage via crafted RTCP packets, aka Bug ID CSCuj72215...

[security bulletin] HPSBUX02963 SSRT101297 rev.1 - HP-UX m4(1), Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04103553 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04103553 Version: 1 HPSBUX02963...

HP-UX m4 privilege escalation

No description provided...

CVE-2013-6200

Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors...

CVE-2013-6200

CVE-2013-6200 concerns a local vulnerability in HP-UX’s m4(1) on HP-UX B.11.23 and B.11.31, allowing local users to obtain sensitive information or modify data via unspecified vectors. HP's security bulletin HPSBUX02963 (SSRT101297) and subsequent patches confirm affected versions and remediation...

CVE-2013-6200

Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors...

HP-UX PHCO_43835 : s700_800 11.31 m4(1) cumulative patch

s700800 11.31 m41 cumulative patch : A potential security vulnerability has been identified with HP-UX's m41 macro processor command. The vulnerability could be exploited locally resulting in unauthorized access. References: CVE-2013-6200, SSRT101297. %NASLMINLEVEL 70300 C Tenable Network Securit...

HP-UX PHCO_43843 : s700_800 11.23 m4(1) cumulative patch

s700800 11.23 m41 cumulative patch : A potential security vulnerability has been identified with HP-UX's m41 macro processor command. The vulnerability could be exploited locally resulting in unauthorized access. References: CVE-2013-6200, SSRT101297. %NASLMINLEVEL 70300 C Tenable Network Securit...

Slackware Advisory SSA:2008-098-01 m4

The remote host is missing an update as announced via advisory SSA:2008-098-01. OpenVAS Vulnerability Test $Id: esoftslkssa200809801.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2008-098-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : opensc (ZYPP Patch Number 5910)

This update fixes a security issues with opensc that occured when initializing blank smart cards with Siemens CardOS M4. After the initialization anyone could set the PIN of the smart card without authorization. CVE-2008-2235 NOTE: Already initialized cards are still vulnerable after this update...

SuSE9 Security Update : opensc, opensc-devel (YOU Patch Number 12240)

This revised update fixes a security issue with opensc that occurs when initializing blank smart cards with Siemens CardOS M4. After initialization, anyone could set the PIN of the smart card without authorization. CVE-2008-2235 NOTE: cards already initialized with the old version are still...