Security Bulletin:IBM SDK, Java Technology Edition Quarterly CPU - Oct 2018 - Includes Oracle Oct.2018 CPU affects DB2 Recovery Expert for Linux, Unix and Windows

Summary There is vulnerability in IBM® Runtime Environment Java™ Version Java 1.8.0 SR5 FP16 and earlier used by DB2 Recovery Expert for Linux, Unix and Windows. These issues were disclosed as part of the IBM Java SDK updates in Oct. 2018. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION:...

WordPress moreads-se plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. moreads-se is a web advertising add-on plugin used in it. A cross-site scripting vulnerability exists in the WordPress moreads-se...

Security Bulletin: A vulnerability in IBM Java Runtime affect Financial Transaction Manager for Check Services for Multi-Platform

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 7 or Version 8 used by Financial Transaction Manager for Check Services for Multi-Platform FMT CHK. Financial Transaction Manager for Check Services for Multi-Platform has addressed the applicable CVE. Vulnerability Detail...

CVE-2017-18526

The moreads-se plugin before 1.4.7 for WordPress has XSS...

CVE-2017-18526

The moreads-se plugin before 1.4.7 for WordPress has XSS...

Cross site scripting

The moreads-se plugin before 1.4.7 for WordPress has XSS...

CVE-2017-18526

The moreads-se plugin before 1.4.7 for WordPress has XSS...

CVE-2017-18526

The CVE-2017-18526 affects the WordPress Moreads‑Se plugin prior to version 1.4.7, with a cross‑site scripting (XSS) flaw. The vulnerability concerns the plugin’s handling of input leading to client‑side code execution. No exploit details are provided in the supplied documents. Remediation: upgra...

CVE-2017-18526: Improper Neutralization of Input During Web Page Generation

The moreads-se plugin before 1.4.7 for WordPress has XSS...

PT-2019-8460

Name of the Vulnerable Software and Affected Versions moreads-se plugin versions prior to 1.4.7 Description The issue is related to a cross-site scripting XSS problem. Recommendations For versions prior to 1.4.7, update to version 1.4.7 or later to resolve the issue...

PT-2019-20296

Уязвимость компоненты fly-admin-gmc-se рабочей среды FLY операционной системы Astra Linux связана с ошибкой, приводящей к значительной задержки открытия папки с включенным фильтром ELF. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PT-2019-20287

Уязвимость компоненты fly-admin-ald-se рабочей среды FLY операционной системы Astra Linux связана с некорректной конфигурацией контекстов безопасности при добавлении/удалении пользователей, входящих в группу администраторов. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно,...

PT-2019-20299

Уязвимость компонента fly-admin-local-se рабочей среды FLY операционной системы Astra Linux связана с ошибкой логирования при смене пользовательских привилегий, а также с ошибкой создания правила для устройства с тем же именем. Эксплуатация уязвимости может позволить нарушителю оказать воздействи...

PT-2019-20305

Уязвимость компонента fly-admin-service-se рабочей среды FLY операционной системы Astra Linux связана с ошибкой интерпретации разделов DocumentRoot конфигурационных файлов для Apache, а также с отсутствием проверки установленных пакетов для почты. Эксплуатация уязвимости может позволить нарушител...

OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Important: Red Hat Security Advisory: java-1.7.1-ibm security update

An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2019-1266)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

NewStart CGSL MAIN 4.05 : java-1.8.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0146)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.8.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are affected are Ja...

NewStart CGSL MAIN 4.05 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0142)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are affected are Ja...