65 matches found
CVE-2019-12384
A flaw was discovered in FasterXML jackson-databind in versions prior to 2.9.9. The vulnerability would permit polymorphic deserialization of malicious objects using the logback-core gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when...
Security Bulletin: IBM Emptoris Sourcing is affected by open redirect vulnerability (CVE-2016-0329).
Summary IBM Emptoris Sourcing product-help system contains an open redirect vulnerability. Vulnerability Details CVEID: CVE-2016-0329 DESCRIPTION: IBM Emptoris Sourcing could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An attacker could exploit...
PT-2017-17360 · Unknown +2 · Audio File Library +2
Name of the Vulnerable Software and Affected Versions: Audio File Library version 0.3.6 Description: The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and crash, via a crafted file. This is due to a problem in the runPull function in...
No Patch Coming for Newly Announced Vulnerabilities in ABB Legacy Products
Two independent researchers who’ve been warning of the threat of serious attacks against bug-riddled ICS and SCADA systems today issued an alert through ICS-CERT that vulnerabilities in ABB products could lead to DoS attacks or allow an attacker to remotely launch malicious code. No patch is...
