IBM Spectrum Protect Client VM Backup INCLUDE.VMTSMVSS Option Credentials Disclosure

The version of IBM Spectrum Protect Client installed on the remote host is 7.1.x prior to 7.1.6.4. It is, therefore, affected by an information disclosure vulnerability due to the application exposing obfuscated VMware vCenter User ID and Password information during the VM backup process using th...

IBM Spectrum Protect Mount Detection

Binary data ibmtsmfastbackmountdetect.nbin...

CVE-2016-2988

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain administrative access by leveraging multiple...

CVE-2016-2988

CVE-2016-2988 affects IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (IBM Spectrum Protect for VE). A GUI flaw allows an authenticated user to bypass the TSM administrative credential requirement and perform admin‑level GUI tasks when multiple users are logged in....

PT-2016-5312

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments versions 6.4.x through 6.4.3.3 IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka...

Yandex Browser Authentication Bypass Vulnerability (CNVD-2016-10635)

Yandex Browser for desktop is a desktop browser from the Russian company Yandex.Yandex Browser Translator is one of the translation applications. A security bypass vulnerability exists in the Yandex Protect Anti-phishing warning feature in Yandex Browser for desktop. A remote attacker can exploit...

CVE-2016-8503

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript...

Design/Logic Flaw

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript...

CVE-2016-8502

CVE-2016-8502 concerns Yandex Browser (desktop) where the Yandex Protect Anti-phishing warning, in versions 15.12.0 to 16.2, could be exploited by a remote attacker to brute-force passwords on important web resources via crafted JavaScript. The issue is described as an authentication bypass/anti-...

CVE-2016-8503

CVE-2016-8503 affects Yandex Browser for desktop with Yandex Protect Anti-phishing warning (versions before 16.9, 16.7–16.9 range). Connected sources corroborate a remote attacker could use JavaScript in conjunction with the anti-phishing warning to brute-force passwords on important web-resource...

CVE-2016-8503: Undefined Security Weakness

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript...

CVE-2016-8502: Undefined Security Weakness

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript...

Input validation

IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...

CVE-2016-5927

CVE-2016-5927 affects IBM Tivoli Storage Manager for Space Management (Spectrum Protect for Space Management) versions 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6. The root cause is that enabling application tracing for the dsmsetpw command can cause the trace output to rev...

CVE-2016-3059

CVE-2016-3059 affects IBM Tivoli Storage Manager for Databases (IBM Spectrum Protect for Databases) and IBM Tivoli Storage FlashCopy Manager for Microsoft SQL Server (IBM Spectrum Protect Snapshot). The vulnerability allows local users to disclose the cleartext SQL Server password by reading the ...

CVE-2016-3059

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...

CVE-2016-3059: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...

Juniper Protect-RE Firewall Filter Security Bypass Vulnerability

Juniper Protect-RE Firewall Filter is a suite of firewall filtering software. A security bypass vulnerability exists in Juniper Protect-RE Firewall Filter, which can be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...

CVE-2014-9793

platform/msmshared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal bug CR580567...

Code injection

platform/msmshared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal bug CR580567...