12977 matches found
CVE-2018-10811: Missing Initialization of Resource
strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...
PT-2018-11249
Name of the Vulnerable Software and Affected Versions Zuul versions prior to 3.1.0 Description An issue was discovered where if nodes become offline during the build, the no log attribute of a task is ignored. This could lead to accidentally leaking credentials or secrets, particularly when the...
CVE-2018-12532
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...
CVE-2018-12532
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...
Security Bulletin: IBM SONAS Administrator password can be read by the root user from the shell command history (CVE-2014-3045)
Summary A fix is available for IBM SONAS, for the security issue that after changing password of administrative user, the password can be read by the root user from the shell command history. Vulnerability Details CVEID: CVE-2014-3045 DESCRIPTION: One of the purposes of chuser command is to modif...
Security Bulletin: Tivoli Storage Manager Server GSKit Encrypted Record Length Vulnerability (CVE-2012-2191)
Summary A vulnerability exists in the Tivoli Storage Manager server related to SSL/TLS Record Layer Processing CVE-2012-2191. Vulnerability Details A vulnerability CVE-2012-2191 exists in the IBM Tivoli Storage Manager TSM server when used with Secure Sockets Layer SSL. An included component of t...
Security Bulletin: IBM Security Access Manager is affected by vulnerabilities in Python (CVE-2016-0772, CVE-2016-5699, CVE-2016-1000110)
Summary Vulnerabilities have been identified in Python. IBM Security Access Manager appliances use Python and are affected by these vulnerabilities. Vulnerability Details CVEID: CVE-2016-0772 DESCRIPTION: Python's smtplib library is vulnerable to a stripping attack. An exception isn't returned by...
Security Bulletin: IBM® DB2® contains a file disclosure vulnerability using a SELECT statement with XML/XSLT function (CVE-2014-8910)
Summary IBM DB2 contains a file disclosure vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by executing a specially-crafted SELECT statement with XML/XSLT function to read arbitrary text files owned by the DB2 instance owner. On Windows, the attacker is able to re...
Security Bulletin: TLS padding vulnerability affects IBM WebSphere MQ (CVE-2014-8730)
Summary Transport Layer Security TLS padding vulnerability via a POODLE Padding Oracle On Downgraded Legacy Encryption like attack affects IBM WebSphere MQ. Vulnerability Details CVE-ID: CVE-2014-8730 DESCRIPTION: Product could allow a remote attacker to obtain sensitive information, caused by th...
PT-2018-11216
Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.20180210 Description An issue was discovered that allows for "Directory Traversal" and "Arbitrary file read" via the "/admin/cmsTemplate/content.html" API endpoint with a path variable set to ../. Recommendations For...
Unspecified vulnerability in html-janitor
html-janitor is a module for controlling, cleaning up HTML. A security vulnerability exists in html-janitor. An attacker can exploit this vulnerability to bypass the filtering process with the help of the 'sanitized' variable...
Heap overflow
In wmandpendresponseeventhandler, the variable lenendrsp is a uint32 which can be overflowed if the value of variable "event-numndpendrspperndilist" is very large which can then lead to a heap overwrite of the heap object endrsp in all Android releases from CAF Android for MSM, Firefox OS for MSM...
CVE-2018-9246
The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection via the create, runfile, backup, or restore function. The vulnerability...
CVE-2018-9246
The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection via the create, runfile, backup, or restore function. The vulnerability...
openSUSE Security Update : xdg-utils (openSUSE-2018-573)
This update for xdg-utils fixes this security issues : - CVE-2017-18266: The openenvvar function in xdg-open did not validate strings launching the program specified by the BROWSER environment variable, which might allowed remote attackers to conduct argument-injection attacks via a crafted URL...
Code injection
mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16057
nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-0928
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the 'sanitized' variable causing sanitization to be bypassed...
Code injection
d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
PT-2018-5155
Name of the Vulnerable Software and Affected Versions html-janitor versions prior to 2.0.4 Description The issue allows for the bypass of sanitization due to user control of the sanitized variable, leading to cross-site scripting XSS attacks. This can occur when arbitrary HTML passes the...