12213 matches found
Security Bulletin: Information Disclosure in IBM StoredIQ (CVE-2020-4224)
Summary IBM StoredIQ has addressed the following information disclosure vulnerability. Vulnerability Details CVEID: CVE-2020-4224 DESCRIPTION: IBM StoredIQ could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links...
Low: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP1 Security Update
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low...
Low: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP1 Security Update
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 1 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Security Bulletin: IBM MQ Appliance is affected by OpenSSL vulnerabilities (CVE-2018-0734 and CVE-2019-1559)
Summary IBM MQ Appliance has addressed the following OpenSSL vulnerabilities. Vulnerability Details CVEID: CVE-2019-1559 DESCRIPTION: If an application encounters a fatal protocol error and then calls SSLshutdown twice once to send a closenotify, and once to receive one then OpenSSL can respond...
Security Bulletin: IBM MQ Appliance is affected by an unauthorised access vulnerability (CVE-2019-4621)
Summary IBM MQ Appliance has addressed the following unauthorised access vulnerability. Vulnerability Details CVEID: CVE-2019-4621 DESCRIPTION: IBM DataPower Appliance and IBM MQ Appliance have a default administrator account that is enabled if the IPMI LAN channel is enabled. A remote attacker...
Security Bulletin: IBM MQ Appliance could allow a local attacker to bypass security restrictions (CVE-2019-4620)
Summary IBM MQ Appliance has addressed the following security restrictions bypass vulnerability. Vulnerability Details CVEID: CVE-2019-4620 DESCRIPTION: IBM MQ Appliance could allow a local attacker to bypass security restrictions caused by improper validation of environment variables. CVSS Base...
ZOHO ManageEngine ServiceDeskPlus 11.0 Build 11007 Cross Site Scripting
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected XSS product: ZOHO ManageEngine ServiceDeskPlus vulnerable version: = 11.0 Build 11007 fixed version: 11.0 Build 11010 CVE number: CVE-2020-6843 impact: medium...
org.entando.entando.plugins:entando-plugin-jpinfinispan (5.1.0), org.hibernate.ogm:hibernate-ogm-infinispan (5.0.0.beta1) +35 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.0.2.final)
org.infinispan:infinispan-core MAVEN version 8.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.entando.entando.plugins:entando-plugin-jpinfinispan 5.1.0 -...
org.infinispan.server:infinispan-server-event-logger (8.2.0.cr1), org.infinispan.server:infinispan-server-feature-pack (8.2.0.cr1) +35 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.2.0.cr1)
org.infinispan:infinispan-core MAVEN version 8.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 8.2.0.cr1 -...
org.infinispan.server:infinispan-server-feature-pack (8.1.6.final), org.infinispan.server:infinispan-server-infinispan (8.1.6.final) +33 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.1.6.final)
org.infinispan:infinispan-core MAVEN version 8.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.6.final -...
org.infinispan.server:infinispan-server-event-logger (8.2.0.beta2), org.infinispan.server:infinispan-server-feature-pack (8.2.0.beta2) +35 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.2.0.beta2)
org.infinispan:infinispan-core MAVEN version 8.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-event-logger 8.2.0.beta2 -...
org.infinispan.server:infinispan-server-feature-pack (8.1.5.final), org.infinispan.server:infinispan-server-infinispan (8.1.5.final) +33 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.1.5.final)
org.infinispan:infinispan-core MAVEN version 8.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.5.final -...
Security Bulletin: Information disclosure vulnerability in WebSphere Application Server (CVE-2019-4477)
Summary There is an information disclosure in WebSphere Application Server when using Security Auditing. Vulnerability Details CVEID: CVE-2019-4477 DESCRIPTION: IBM WebSphere Application Server could allow a user with access to audit logs to obtain sensitive information, caused by improper handli...
Security Bulletin: Information disclosure vulnerability in WebSphere Application Server (CVE-2019-4441)
Summary There is a potential information disclosure vulnerability in IBM WebSphere Application Server. Vulnerability Details CVEID: CVE-2019-4441 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to obtain sensitive information when a stack trace is returned in the...
Security Bulletin: Swagger vulnerability affects WebSphere Application Server Liberty (CVE-2019-17495)
Summary There is a Swagger vulnerability that affects WebSphere Application Server Liberty. This affects the mpOpen-1.x and openAPI-3.x features. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2019-17495 DESCRIPTION: Swagger UI could allow a remote attacker to obtain...
Security Bulletin: IBM® Db2® LUW on AIX and Linux Affected by a Vulnerability in IBM® Spectrum Scale (CVE-2019-4558)
Summary Db2 LUW is affected by a vulnerability in IBM® Spectrum Scale Version 5.0.x and 4.2.x that is used by Db2® pureScale™ Feature on AIX and Linux. IBM Spectrum Scale is previously known as General Parallel File System GPFS. Vulnerability Details CVEID: CVE-2019-4558 DESCRIPTION: A security...
Microsoft Excel 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4484243)
This host is missing an important security update according to Microsoft KB4484243 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2010 Service Pack 2 Memory Corruption Vulnerability (KB4484236)
This host is missing an important security update according to Microsoft KB4484236 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2013 Service Pack 1 Memory Corruption Vulnerability (KB4484227)
This host is missing an important security update according to Microsoft KB4484227 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
