CVE-2018-1912

IBM DOORS Next Generation (DNG/RRC) versions 6.0.2–6.0.6 are affected by a cross-site scripting vulnerability in the Web UI that could allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The issue stems from improper input handling in th...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2019-06355)

IBM Rational DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM, USA. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2019-06352)

IBM Rational DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM, USA. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...

CVE-2018-1911: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.2 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1912: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

PT-2019-9730

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 5.0 through 5.0.2 IBM DOORS Next Generation DNG/RRC versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality...

PT-2019-9732

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 6.0.2 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

DEBIAN-CVE-2019-9169

In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match...

CB Customer Spotlight: Q&A with MSD of Mt. Vernon’s William Stein

For the past 28 years, William Stein, Certified Education Technology Leader, has served as the Director of Information Systems for the Metropolitan School District MSD of Mt. Vernon in Indiana. Stein uses Carbon Black solutions to protect the K-12 school district’s data by responding to emerging...

MATIO out-of-bounds read and SEGV vulnerabilities

matio is a C library for reading and writing MATLAB MAT files. The ReadNextCell function in mat5.c in libmatio.a in matio 1.5.13 has an out-of-bounds read and SEGV vulnerability. No detailed vulnerability details are provided at this time...

MATIO stack buffer overread vulnerability (CNVD-2019-28418)

matio is a C library for reading and writing MATLAB MAT files. A stack buffer over-read vulnerability exists in the "Rank and Dimension" feature of the ReadNextCell function in mat5.c in libmatio.a in matio 1.5.13. No details of the vulnerability are available at this time...

UBUNTU-CVE-2019-9034

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell in mat5.c...

UBUNTU-CVE-2019-9038

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell in mat5.c...

UBUNTU-CVE-2019-9027

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a heap-based buffer overflow problem in the function ReadNextCell in mat5.c...

DEBIAN-CVE-2019-9036

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle in mat5.c...

DEBIAN-CVE-2019-9026

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a heap-based buffer overflow in the function InflateVarName in inflate.c when called from ReadNextCell in mat5.c...

CVE-2019-1003023

A cross-site scripting vulnerability exists in Jenkins Warnings Next Generation Plugin 1.0.1 and earlier in src/main/java/io/jenkins/plugins/analysis/core/model/DetailsTableModel.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourceDetail.java,...

CVE-2019-1003023

A cross-site scripting vulnerability exists in Jenkins Warnings Next Generation Plugin 1.0.1 and earlier in src/main/java/io/jenkins/plugins/analysis/core/model/DetailsTableModel.java, src/main/java/io/jenkins/plugins/analysis/core/model/SourceDetail.java,...

CVE-2019-1003008

A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/analysis/warnings/groovy/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint...

CVE-2019-1003008

A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/analysis/warnings/groovy/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint...