Microsoft Windows Kernel CVE-2019-0549 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Kernel CVE-2019-0536 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Data Sharing Service CVE-2019-0572 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft...

Cross site scripting

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

Cross site scripting

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID:...

CVE-2018-1951

The CVE applies to IBM Publishing Engine versions 2.1.2, 6.0.5, and 6.0.6, where a cross‑site scripting vulnerability could allow injection of arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. The CVSS v3.0 base score is 5.4 (MEDIUM), wi...

CVE-2018-1657

IBM Publishing Engine versions 2.1.2, 6.0.5, and 6.0.6 are vulnerable to cross-site scripting (CWE) via the Web UI, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. Remediation provided by IBM bulletin includes upgrading to later ifix p...

CVE-2018-1657

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID:...

Fedora 28 : 1:libreoffice (2018-8d3f4d7b28)

CVE-2018-10583 A LibreOffice document with a linked image, which is on a samba share, will cause LibreOffice to automatically initiate a samba connection to retrieve the image. This is by design. If end users or administrators wish to disable this functionality this can now be disabled via...

Fedora 28 : php-symfony3 (2018-9c38d1dc1d)

3.4.14 2018-08-01 - security cve-2018-14774 HttpKernel fix trusted headers management in HttpCache and InlineFragmentRenderer nicolas-grekas - security cve-2018-14773 HttpFoundation Remove support for legacy and risky HTTP headers nicolas-grekas - bug 28003 HttpKernel Fixes invalid REMOTEADDR in...

Fedora 28 : php-symfony (2018-9b54497b6e)

2.8.44 2018-08-01 - security cve-2018-14774 HttpKernel fix trusted headers management in HttpCache and InlineFragmentRenderer nicolas-grekas - security cve-2018-14773 HttpFoundation Remove support for legacy and risky HTTP headers nicolas-grekas - bug 28003 HttpKernel Fixes invalid REMOTEADDR in...

Microsoft Windows - Windows Error Reporting Local Privilege Escalation

Microsoft Windows - Windows Error Reporting Local Privilege Escalation Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before running it... I guess I could have included it as a resource in the exe.. but whatever. Example:...

Security Bulletin: Jazz for Service Management exposes cross site request forgery vulnerability (CVE-2018-1709)

Summary Jazz for Service Management exposes cross site request forgery vulnerability when accessing Dashboard Application Services Hub. Vulnerability Details CVEID: CVE-2018-1709 DESCRIPTION: IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to...

The vulnerability of the Qualcomm QTEE keymaster component of the Android operating system allows a intruder to gain access to memory.

The vulnerability of the Qualcomm QTEE keymaster component of the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to memory...

CVE-2018-11988

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Un-trusted pointer de-reference issue by accessing a variable which is already freed...

Null pointer dereference

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Un-trusted pointer de-reference issue by accessing a variable which is already freed...

CVE-2018-11988

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Un-trusted pointer de-reference issue by accessing a variable which is already freed...

The vulnerability of the software for automating testing processes during the development of information systems – IBM Rational Quality Manager – is related to insufficient protection of the website structure. This vulnerability allows attackers to disclose user credentials during a trusted session.

The vulnerability of the IBM Rational Quality Manager software for automating testing processes exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to disclose user credentials during a secure session by injecting...

ARM Trusted Firmware Information Disclosure Vulnerability

ARM Trusted Firmware is an implementation of multiple ARM interface standards. An information disclosure vulnerability exists in ARM Trusted Firmware version 1.4 and earlier, which stems from a program's failure to initialize or save/store the PMCREL0 register and can be exploited by an attacker ...

Information disclosure

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCREL0 register can leak secure world timing information...