RedHat Update for abrt and libreport RHSA-2015:2505-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: abrt and libreport security update

Updated abrt and libreport packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libreport: Possible private data leak in Bugzilla bugs opened by ABRT

It was found that ABRT may have exposed non-public information to Red Hat Bugzilla during crash reporting. A bug in the libreport library caused changes made by a user in files included in a crash report to be discarded. As a result, Red Hat Bugzilla attachments may contain data that was not...

Information Disclosure and Arbitrary File Upload Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is a comprehensive enterprise-level data integration application system developed by UFIDA Software Co. The UFIDA NC-IUFO Reporting System suffers from an information disclosure and arbitrary file upload vulnerability, which allows an attacker to exploit this...

SUSE SLED12 / SLES12 Security Update : Recommended update for LibreOffice (SUSE-SU-2015:1915-1)

This update brings LibreOffice to version 5.0.2, a major version update. It brings lots of new features, bugfixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ - LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module,...

Design/Logic Flaw

The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file...

CVE-2015-4927

The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file...

plus.rjl.se XSS vulnerability

Open Bug Bounty ID: OBB-95682 Description| Value ---|--- Affected Website:| plus.rjl.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Correction: BMC-2015-0005: File inclusion vulnerability caused by misconfiguration of "BIRT Viewer" servlet as used in BMC Remedy AR Reporting

Enigmail: ????? ????? ????????? ?? ???? ??????????? ??? ????????? Errata: This is a correction of our previous disclosure email from September 23rd, 2015. Our previous posting implied that the security vulnerability we discovered was in the "BIRT Viewer" servlet itself. This is NOT the case, but...

Correction: BMC-2015-0006: File inclusion vulnerability caused by misconfiguration of "BIRT Engine" servlet as used in BMC Remedy AR Reporting

Enigmail: ????? ????? ????????? ?? ???? ??????????? ??? ????????? Errata: This is a correction of our previous disclosure email from September 23rd, 2015. Our previous posting implied that the security vulnerability we discovered was in the "BIRT Engine" servlet itself. This is NOT the case, but...

grazia.it XSS vulnerability

Open Bug Bounty ID: OBB-94795 Description| Value ---|--- Affected Website:| grazia.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SUSE-SU-2015:1915-1 Recommended update for LibreOffice

This update brings LibreOffice to version 5.0.2, a major version update. It brings lots of new features, bugfixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module,...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Common Reporting TCR 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-1969

CVE-2015-1969 is an XSS vulnerability in IBM Tivoli Common Reporting (TCR) used by Cognos BI. A remote authenticated user could inject script via a crafted URL due to improper validation. Affected products/versions include Tivoli Common Reporting 2.1 (before IF13), 2.1.1 (before IF21), and 3.1.x ...

CVE-2015-1969

Cross-site scripting XSS vulnerability in IBM Tivoli Common Reporting TCR 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Automate Vulnerability Scanning: Seccubus

Seccubus automates regular vulnerability scans with vrious tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. The goal is to reduce the analysis time for subsequent scans of the same infrastructure by only reporting delta findings...

Web Application Scanning Consolidation / Info Reporting

The script consolidates and reports various information for web application formerly called SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: New / improved code since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

FireEye Appliance Unauthorized File Disclosure Vulnerability

Exploit for php platform in category web applications Just one of many handfuls of FireEye / Mandiant 0day. Been sitting on this for more than 18 months with no fix from those security "experts" at FireEye. Pretty sure Mandiant staff coded this and other bugs into the products. Even more sad,...

GE Healthcare Centricity DMS Ad Hoc Reporting Trust Management Vulnerability

GE Healthcare Centricity DMS is a General Electric GE cardiology clinical education data management system for the healthcare industry. A security vulnerability exists in the Ad Hoc Reporting feature of GE Healthcare Centricity DMS version 4.2, which originates from an Administrator user using...

Hardcoded credentials

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a...