4884 matches found
CVE-2018-12174
Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...
CVE-2018-12174
Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...
CVE-2018-12174
Intel Advisory INTEL-SA-00180 confirms CVE-2018-12174 as a heap overflow in Intel® Trace Analyzer 2018 within Intel® Parallel Studio XE 2018 Update 3, potentially enabling an authenticated user to escalate privileges via local access. Affected product line is Intel® Parallel Studio XE 2018 Update...
CVE-2018-12174: Out-of-bounds Write
Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...
PT-2018-11048
Name of the Vulnerable Software and Affected Versions Intel Parallel Studio XE 2018 Update 3 Description A heap overflow issue in Intel Trace Analyzer 2018 may allow an authenticated user to potentially escalate privileges via local access. Recommendations For Intel Parallel Studio XE 2018 Update...
Intel® Trace Analyzer 2018 Advisory
Summary: A potential security vulnerability in Intel® Trace Analyzer 2018 in Intel® Parallel Studio XE 2018 may allow an authenticated user to escalate privileges via a local vector. Intel is releasing Intel® Parallel Studio XE 2018 updates to mitigate this potential vulnerability. Vulnerability...
IBM Spectrum Protect Server Information Disclosure Vulnerability
IBM Spectrum Protect Server is a suite of data protection platforms from IBM in the United States that provide organizations with a single point of control and management and support for backup and recovery of virtual, physical and cloud environments of all sizes. A security vulnerability exists ...
krb5 security, bug fix, and enhancement update
1.15.1-34 - In FIPS mode, add plaintext fallback for RC4 usages and taint - Resolves: 1570600 1.15.1-33 - Use SHA-256 instead of MD5 for audit ticket IDs - Resolves: 1570600 1.15.1-32 - Include preauth name in trace output if possible - Update cert generation scripts to work on modern openssl - F...
Information disclosure
IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873...
CVE-2018-1788
IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873...
CVE-2018-1788
IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873...
CVE-2018-1788
IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873...
CVE-2018-1788: Insertion of Sensitive Information into Log File
IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873...
Intel (Skylake Kaby Lake) - PortSmash CPU SMT Side-Channel
Intel Skylake Kaby Lake - PortSmash CPU SMT Side-Channel Summary This is a proof-of-concept exploit of the PortSmash microarchitecture attack, tracked by CVE-2018-5407. Setup Prerequisites A CPU featuring SMT e.g. Hyper-Threading is the only requirement. This exploit code should work out of the b...
Intel (Skylake / Kaby Lake) - 'PortSmash' CPU SMT Side-Channel
Summary This is a proof-of-concept exploit of the PortSmash microarchitecture attack, tracked by CVE-2018-5407. Setup Prerequisites A CPU featuring SMT e.g. Hyper-Threading is the only requirement. This exploit code should work out of the box on Skylake and Kaby Lake. For other SMT architectures,...
PT-2018-3342
Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Server versions 7.1 through 8.1 Description: The issue is related to inadequate storage of registration data, which could allow an attacker to gain unauthorized access to protected information using trace logs. A local...
SIPp 3.3.990 - Local Buffer Overflow (PoC)
SIPp 3.3.990 - Local Buffer Overflow PoC Exploit Title: SIPp 3.3.990 - Local Buffer Overflow PoC Date: 2018-10-29 Exploit Author: Nawaf Alkeraithe Vendor Homepage: http://sipp.sourceforge.net/ Software Link: https://sourceforge.net/projects/sipp/files/sipp/3.4/sipp-3.3.990.tar.gz/download Version...
Gitlab -- multiple vulnerabilities
Gitlab reports: RCE in Gitlab Wiki API SSRF in Hipchat integration Cleartext storage of personal access tokens Information exposure through stack trace error message Persistent XSS autocomplete Information exposure in stored browser history Information exposure when replying to issues through ema...
CVE-2018-11039
Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...
Security Bulletin: Password disclosure via trace log vulnerability in IBM MQ Managed File Transfer (CVE-2017-1795)
Summary Trace files generated by IBM MQ Managed File Transfer commands display passwords in plain text. Vulnerability Details CVEID: CVE-2017-1795 DESCRIPTION: IBM MQ Managed File Transfer could allow a local user to obtain highly sensitive information via trace log files generated by its command...