15715 matches found
systemd/fuzz-network-parser: Use-of-uninitialized-value in condition_test
Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5652461068484608 Project: systemd Fuzzer: libFuzzersystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...
CyberAegis Aether Competition Team Reflects Bright Future for Young Women in STEM & Cybersecurity
I am always excited to get involved in conversations around getting more young women into STEM earlier. Recently, I was able to catch up with the members of the CyberAegis Aether team, an all-girls, middle school cybersecurity competition team. Here is what they had to say: Tell us a little bit...
Mail.ru: touch.mail.ru / e.mail.ru memory content disclosure
An invalid handling of NUL byte in API request led to disclosure of HTTP server memory region. The root cause of this bug is tracked to nginx+openresty. An advisory is below: Insecure implementation of nginx rewrite / OpenResty ngx.req.seturi + memory content leak in nginx. OpenResty is LUA engin...
Mature Your Threat Hunting by Testing Your Visibility
Threat hunting starts with a hypothesis. Without a hypothesis, you’re just combing through log files - and that isn’t threat hunting. Once you have a hypothesis, you can begin your search, but you won’t always find a hacker. Testing, like the open source tests available from Red Canary’s Atomic R...
openthread/ip6-send-fuzzer: Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5153373483958272 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...
IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2019-07360)
IBM Rational Team Concert is a software lifecycle management solution that supports real-time, relevant collaboration for decentralized teams. A cross-site scripting vulnerability exists in IBM Rational Team Concert 5.0 - 6.0.6. An attacker can exploit the vulnerability by embedding arbitrary...
IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2019-07359)
IBM Rational Team Concert is a software lifecycle management solution that supports real-time, relevant collaboration for decentralized teams. A cross-site scripting vulnerability exists in IBM Rational Team Concert 5.0 - 6.0.6. An attacker can exploit the vulnerability by embedding arbitrary...
IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2019-07361)
IBM Rational Team Concert is a software lifecycle management solution that supports real-time, relevant collaboration for decentralized teams. A cross-site scripting vulnerability exists in IBM Rational Team Concert 5.0 - 6.0.6. An attacker can exploit the vulnerability by embedding arbitrary...
CVE-2018-1983
IBM Rational Team Concert (RTC) 5.0–6.0.6 is affected by a cross-site scripting (XSS) vulnerability in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials in a trusted session. Affected products include Rational Collaborative Lifecycle Management 5.0–6....
CVE-2018-1982
IBM Rational Team Concert (RTC) 5.0–6.0.6 is affected by a cross-site scripting (XSS) vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The root cause is the presence of XSS in RTC’s Web U...
CVE-2018-1983
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...
CVE-2018-1982
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...
CVE-2018-1984
CVE-2018-1984 affects IBM Rational Team Concert (RTC) / Rational Collaborative Lifecycle Management 5.0–6.0.6. A cross-site scripting vulnerability in the Web UI allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The issue is documented ...
CVE-2018-1984
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...
CVE-2018-1983
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...
CVE-2018-1982
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...
CVE-2018-1983
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...
CVE-2018-1984
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...
CVE-2018-1982
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...
CVE-2018-1984
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...