JasperSoft JasperReports 4.7 Password Disclosure

Credits: Joshua Platz aka Binary1985 + CVE ID: CVE-2017-14941 + Website: https://github.com/binary1985 + Source: https://raw.githubusercontent.com/binary1985/VulnerabilityDisclosure/master/JasperSoft%20JasperReports%20-%204.7%20-%20CVE-2017-14941 Vendor: ==========================...

Dell EMC VNX Monitoring and Reporting Scheduler Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dell EMC VNX Monitoring and Reporting. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within...

PT-2017-18066

Name of the Vulnerable Software and Affected Versions Dell EMC VNX Monitoring and Reporting versions affected versions not specified Description The issue concerns the Java Management Extensions JMX protocol used for communication between components in the Alerting and/or Compliance components...

FTC Releases Alerts on Protecting Against Identity Theft

The Federal Trade Commission FTC has released two alerts to educate consumers on recommended protections against identity theft after the recent data breach at Equifax. Users should consider placing security freezes with the three major credit reporting agencies: Equifax, Transunion, and Experian...

Tor: Tor Project - Full Path Disclosure

Vulnerability description not provided...

September 19, 2017—KB4038803 (Preview of Monthly Rollup)

None None...

IBM Lifecycle Query Engine of Jazz Reporting Service Information Disclosure Vulnerability

IBM Lifecycle Query Engine of Jazz Reporting Service is a lifecycle query engine for Jazz Reporting Service from IBM, USA. A security vulnerability exists in IBM Lifecycle Query Engine of Jazz Reporting Service versions 6.0 through 6.0.4. An attacker could exploit the vulnerability to obtain...

Three Ways to Use Data Classification Scan Results

In July we launched Classifier, a free data classification tool that allows you to quickly and easily uncover sensitive data in your databases. Since its launch, the tool has been widely used around the globe, which comes as no surprise given the heightened focus on data protection. Furthermore,...

CVE-2017-1490

An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...

CVE-2017-1490

An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...

CVE-2017-1490

An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...

CVE-2017-1490

The IBM Security Bulletin documents CVE-2017-1490 as a vulnerability in the Lifecycle Query Engine (LQE) shipped with Jazz Reporting Service, affecting Jazz Reporting Service versions 6.0–6.0.4 and capable of disclosing highly sensitive information. Remediation is patch-based: apply 6.0.2-Rationa...

PT-2017-13744

Name of the Vulnerable Software and Affected Versions Jazz Reporting Service versions 6.0 through 6.0.4 Description The issue is related to an unspecified vulnerability in the Lifecycle Query Engine, which could potentially disclose highly sensitive information. Recommendations For Jazz Reporting...

CVE-2017-1490: Exposure of Sensitive Information to an Unauthorized Actor

An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...

CVE-2017-8702

Windows Error Reporting WER in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability"...

CVE-2017-8702

Windows Error Reporting WER in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability"...

Privilege escalation

Windows Error Reporting WER in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability"...

CVE-2017-8702

Windows Error Reporting WER in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability"...

CVE-2017-8702

CVE-2017-8702 is a Windows Elevation of Privilege vulnerability in Windows Error Reporting (WER). Affects Windows 10 Gold/1511/1607 and Windows Server 2016; caused by how WER handles and executes files, enabling a local attacker to gain higher privileges and access sensitive information and syste...

Microsoft Windows Error Reporting Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows Error Reporting WER is one of the Windows error reporting components. An elevation of privilege vulnerability exists in WER in Microsoft Windows. An attacker could exploit this vulnerability t...