IBM Jazz Reporting Service Information Disclosure Vulnerability (CNVD-2017-34406)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

KB4034668: Windows 10 August 2017 Cumulative Update

The remote Windows host is missing security update 4034668. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the...

CVE-2017-1340

IBM Jazz Reporting Service JRS 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455...

CVE-2017-1340

IBM Jazz Reporting Service JRS 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455...

Information disclosure

IBM Jazz Reporting Service JRS 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455...

CVE-2017-1340

IBM Jazz Reporting Service (JRS) 6.0.4 contains a vulnerability where an authenticated user could obtain information on another server that the report builder interacts with. The affected product is Jazz Reporting Service 6.0.4. Root cause details describe information disclosure via the Report Bu...

CVE-2017-5075

Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page...

CVE-2017-5075

Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page...

Design/Logic Flaw

Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page...

CVE-2017-5075

CVE-2017-5075 is a CSP reporting information-disclosure flaw in the Blink/Chromium CSP reporting code. The vulnerability allows a remote attacker to obtain the value of URL fragments through a crafted HTML page. Affected component is the CSP reporting in Blink within Chromium-based QtWebEngine bu...

CVE-2017-5075

Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page...

Sophos UTM Arbitrary File Read Vulnerability

Sophos UTM is the ultimate security solution package from Sophos. An arbitrary file read vulnerability exists in Sophos UTM. A remote authenticated user with access to the 'Logging & Reporting' feature can view arbitrary files on the target system by submitting a specially crafted HTTP request...

Security Analysis with Bamboo Plugin

Build Management with Bamboo In the process of continuous integration, a code repository is automatically built and tested by a CI service when code is pushed or committed to the repository. This enables automated testing, tracking, and reporting of build errors and boosts the productivity of...

Sophos UTM 9 Management Appplication Local File Inclusion Vulnerability

Exploit for hardware platform in category remote exploits Title: Sophos UTM 9 Management Application Local File Inclusion Advisory ID: KL-001-2017-021 Publication Date: 2017.10.24 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2017-021.txt 1. Vulnerability Details Affected...

fidler-isburgfuneralchapels.com XSS vulnerability

Open Bug Bounty ID: OBB-363700 Description| Value ---|--- Affected Website:| fidler-isburgfuneralchapels.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

job-hunt.org XSS vulnerability

Open Bug Bounty ID: OBB-363611 Description| Value ---|--- Affected Website:| job-hunt.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-15597 - Citrix XenServer Security Update

Description of Problem A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix XenServer 7.2. The...

Oracle Hyperion Unspecified vulnerability in Oracle Hyperion Financial Reporting component (CNVD-2017-31832)

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications, it provides financial results, report production and other functions.Oracle Hyperion Financial Reporting is one of the financial statement management component. An unspecified vulnerability exists...

Oracle Hyperion Unspecified Vulnerability in Oracle Hyperion Financial Reporting Component

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications, it provides financial results, report production and other functions.Oracle Hyperion Financial Reporting is one of the financial statement management component. An unspecified vulnerability exists...

F5 Networks BIG-IP : Linux kernel vulnerability (K81211720)

The tcpspliceread function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service infinite loop and soft lockup via vectors involving a TCP packet with the URG flag. CVE-2017-6214 C Tenable Network Security, Inc. The descriptive text and package...