Vulnerabilities in the Internet Explorer browser, which allow a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information

Vulnerabilities that allow for the execution of arbitrary code remotely exist in Internet Explorer due to improper access to objects in memory. These vulnerabilities can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...

The vulnerability of the Internet Explorer browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for the execution of arbitrary code remotely exists in Internet Explorer due to incorrect access to objects in memory. This vulnerability can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...

The vulnerability of the Internet Explorer browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for the execution of arbitrary code remotely exists in Internet Explorer due to incorrect access to objects in memory. This vulnerability can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to memory handling errors. This vulnerability allows attackers to execute arbitrary code or cause a service failure by accessing objects stored in memory in the context of the current user, through improper access...

Option CloudGate Insecure Direct Object References And XSS Vulnerabilities

Option CloudGate is prone to cross site scripting and insecure direct object reference authorization bypass vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Design/Logic Flaw

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...

CVE-2016-0894

The CVE affects EMC RSA Data Loss Prevention 9.6 before SP2 P5. A remote authenticated user can bypass object access restrictions by modifying a parameter, indicating an improper access-control validation in the affected component. Remediation: upgrade to EMC RSA DLP 9.6 SP2 P5 or apply the relev...

CVE-2016-0894

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...

Ipswitch MOVEit DMZ Username Enumeration Vulnerability

Ipswitch MOVEit is an automated file transfer system from Ipswitch, Inc. in the U.S. DMZ is one of the versions. Ipswitch MOVEit DMZ according to the account exists or not to return different error messages, remote attackers can send a series of SOAP to the machine.aspx file please enumerate the...

Microsoft Edge Multiple Vulnerabilities (3124904)

This host is missing a critical security update according to Microsoft Bulletin MS16-002. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco Hosted Collaboration Mediation Fulfillment SOAP API Sensitive Information Disclosure Vulnerability

A vulnerability in the Simple Object Access Protocol SOAP application programming interface API of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an authenticated, remote attacker to obtain sensitive information that should be restricted. The attacker must authentica...

KLA10662 Multiple vulnerabilities in Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Internet Explorer. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper memory objects access at VBScript and JScrip...

Microsoft Internet Explorer Memory Corruption (MS15-056: CVE-2015-1731)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

CXF: Large invalid content could cause temporary space to fill

It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of dis...

Cisco ASR ASR9K Security Bypass Vulnerability

The Cisco ASR 9000 Series is Cisco's integrated services router solution that uses the IOS XR Software modular operating system to provide carrier-class reliability. A security vulnerability exists in the Object-ACL matching process of the Cisco Aggregation Services Router 9000 ASR9K, which can b...

Internet Explorer ASLR Bypass (MS15-009: CVE-2015-0069)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

IBM WebSphere Service Registry and Repository 8.0 < 8.0.0.3 Multiple Vulnerabilities

The version of IBM WebSphere Service Registry and Repository WSRR is version 8.0 prior to 8.0.0.3. It is therefore, affected by multiple vulnerabilities : - An unspecified DOM based cross-site scripting XSS vulnerability in the WSRR web UI. CVE-2014-6132 - WSSR web interface issues a cookie that ...

IBM WebSphere Service Registry and Repository 6.3 < 6.3.0.5 Multiple Vulnerabilities

The version of IBM WebSphere Service Registry and Repository WSRR is version 6.3 prior to 6.3.0.5. It is therefore, affected by multiple vulnerabilities : - An unspecified DOM based cross-site scripting XSS vulnerability in the WSRR web UI. CVE-2014-6132 - WSSR web interface issues a cookie that ...

IBM WebSphere Service Registry and Repository 7.5 < 7.5.0.4 Multiple Vulnerabilities

The version of IBM WebSphere Service Registry and Repository WSRR is version 7.5 prior to 7.5.0.4. It is therefore, affected by multiple vulnerabilities : - An unspecified DOM based cross-site scripting XSS vulnerability in the WSRR web UI. CVE-2014-6132 - WSSR web interface issues a cookie that ...

CVE-2014-6186

IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph...