Cross site scripting

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1731

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Apache HTTP Server CVE-2019-0211 Local Privilege Escalation Vulnerability

Description Apache HTTP Server is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the affected application. Apache HTTP Server versions 2.4.38, 2.4.37, 2.4.35, 2.4.34, 2.4.33, 2.4.30, 2.4.29, 2.4.28, 2.4.27, 2.4.26, 2.4.25,...

SUSE SLED12 / SLES12 Security Update : Recommended update for adcli, sssd (SUSE-SU-2019:0805-1)

This update for adcli and sssd provides the following improvement : Security vulnerability fixed : CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other fixes: Add an option to disable checking for trusted domains in the subdomains provider bsc1125617 Clear...

Intel VISA Tech Can Be Abused, Researchers Allege

UPDATE Researchers allege that a technology in Intel microchips could potentially be activated and abused by bad actors – giving them complete access to all data across an affected device. The Intel technology is called Visualization of Internal Signals Architecture VISA, and is used for...

SUSE-SU-2019:0805-1 Recommended update for adcli, sssd

This update for adcli and sssd provides the following improvement: Security vulnerability fixed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other fixes: - Add an option to disable checking for trusted domains in the subdomains provider bsc1125617 -...

The vulnerabilities of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations allow attackers to gain access to protected information due to insufficient validation of input data.

The vulnerability of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to protected information...

Leveraging AWS Trusted Advisor for Security and Compliance

The benefits of undergoing mandatory or voluntary cybersecurity compliance assessments are well known throughout the cybersecurity industry. These benefits include improving the security posture of the organization, enabling sales to move faster through the sales lifecycle, addressing regulatory...

Security Bulletin: Cross-site scripting vulnerability in OAuth ear in WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1794)

Summary There is a potential cross-site scripting vulnerability in the OAuth ear in WebSphere Application Server shipped with Jazz for Service Management . Vulnerability Details CVEID: CVE-2018-1794 DESCRIPTION: IBM WebSphere Application Server using OAuth ear is vulnerable to cross-site scriptin...

The vulnerability of the HECI subsystem of the microprogramming software, Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services allows a perpetrator to execute arbitrary code.

The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS, is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerabili...

The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine involve insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of the Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine involve insufficient input data validation, allowing attackers to gain access to protected information.

The vulnerability of the Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to protected information...

The vulnerability of microprogramming software such as Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services arises from the execution of operations outside of the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS, is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerabili...

The vulnerability of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine relates to the execution of operations outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary co...

CVE-2019-3808

A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use b...

Design/Logic Flaw

A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use b...

UBUNTU-CVE-2019-3808

A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use b...

GHSA-2FCH-JVG5-CRF6 Improper Input Validation python-gnupg

python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting...

VMware Workstation 14.1.5 VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation

VMware Workstation 14.1.5 VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation VMware: Host VMX Process Impersonation Hijack EoP Platform: VMware Workstation Windows v14.1.5 on Windows 10. Also tested VMware Player 15.0.2. Class: Elevation of Privilege Summary: The...