Security Bulletin: IBM Smart Analytics System 7600, 7700, 7710 and IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in Network Time Protocol

Summary The IBM Smart Analytics System 7600, 7700, 7710 and IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in Network Time Protocol. Vulnerability Details CVEID: CVE-2014-9293 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd could provide weake...

Microsoft Windows Multiple Vulnerabilities (KB4520010)

This host is missing a critical security update according to Microsoft KB4520010 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Apple Safari Security Updates (HT210605)

Apple Safari is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mozilla Thunderbird < 68.0

The version of Thunderbird installed on the remote Windows host is prior to 68.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-28 advisory. - Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code...

Security Bulletin: Potential spoofing attack in WebSphere Application Server may affect IBM InfoSphere Identity Insight (CVE-2018-1695)

Summary There is a potential spoofing attack in WebSphere Application Server shipped as part of IBM InfoSphere Identity Insight. Vulnerability Details CVEs: CVE-2018-1695 Link to security bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10716523 Affected Products and Versions IBM...

CVE-2019-11699

A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page navigations. This could result in user confusion of which site is currently loaded for spoofing attacks. This vulnerability affects Firefox 67...

IBM Security Access Manager Appliance User Impersonation Vulnerability

IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM, USA. The product is mainly used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnosis. A security vulnerability exists in...

CVE-2019-11841

A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP Message Format specification in RFC 4880 chapter 7, a cleartext signed message can contain one or more optional "Hash" Armor Headers. The...

Security Bulletin: Potential spoofing attack in WebSphere Application Server (CVE-2018-1695)

Summary There is a potential spoofing attack in WebSphere Application Server using Form Login when using Java SE 6. This does not occur when using other versions of the Java SE. Vulnerability Details CVEID: CVE-2018-1695 DESCRIPTION: IBM WebSphere Application Server installations using Form Login...

RHEL 7 : .NET Core on Red Hat Enterprise Linux security update for February 2019 (Moderate) (RHSA-2019:0349)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0349 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Security Bulletin: Potential spoofing attack in WebSphere Application Server (CVE-2017-1788)

Summary There is a potential spoofing attack in WebSphere Application Server using Form Login. Vulnerability Details CVEID: CVE-2017-1788 DESCRIPTION: IBM WebSphere Application Server installations using Form Login could allow a remote attacker to conducts spoofing attacks. CVSS Base Score: 5.3...

CVE-2018-19023

Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...

The vulnerability of the Mozilla Firefox browser, related to insufficient validation of input data when using full-screen mode, allows attackers to perform spoofing attacks.

The vulnerability of the Mozilla Firefox browser is related to insufficient validation of input data when using full-screen mode. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by replacing the page or URI...

CVE-2018-18357

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

Security Bulletin: Potential spoofing attack in WebSphere Application Server shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2018-1695)

Summary There is a potential spoofing attack in WebSphere Application Server, which is shipped as a component of IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition. Information about a security vulnerability affecting WebSphere Application Server has been published in a security...

Security Bulletin: Potential spoofing attack in WebSphere Application Server shipped with Jazz for Service Management (CVE-2017-1788)

Summary There is a potential spoofing attack in WebSphere Application Server using Form Login. Vulnerability Details CVEID: CVE-2017-1788 DESCRIPTION: IBM WebSphere Application Server installations using Form Login could allow a remote attacker to conducts spoofing attacks. CVSS Base Score: 5.3...

Security Bulletin: Potential spoofing attack in WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1695)

Summary There is a potential spoofing attack in WebSphere Application Server using Form Login when using Java SE 6. This does not occur when using other versions of the Java SE. Vulnerability Details CVEID: CVE-2018-1695 DESCRIPTION: IBM WebSphere Application Server installations using Form Login...

Security Bulletin: Potential spoofing attack in WebSphere Application Server shipped with Tivoli Integrated Portal (CVE-2018-1695)

Summary There is a potential spoofing attack in WebSphere Application Server using Form Login when using Java SE 6. This does not occur when using other versions of the Java SE. Vulnerability Details CVEID: CVE-2018-1695 DESCRIPTION: IBM WebSphere Application Server installations using Form Login...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2018-1695)

Summary Websphere Application Server WAS is shipped as a component of IBM Operations Analytics Predictive Insights. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Potential spoofing...

Mozilla Firefox Security Advisories (MFSA2018-25, MFSA2018-27) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...