Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with IBM Service Delivery Manager (CVE-2015-4872, CVE-2015-4734 and CVE-2015-5006)

Summary IBM WebSphere Application Server is shipped as components of IBM Service Delivery Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Review security bulletin Multiple vulnerabilities i...

MakeMyTrip application for Android information disclosure vulnerability

MakeMyTrip application for Android is an Android based application for booking tickets, hotels and cabs. A security vulnerability exists in version 7.2.4 of the MakeMyTrip application for Android-based platforms, which stems from the program's failure to encrypt a locally stored database. An...

PHP < 5.6.35, 7.x < 7.0.29, 7.1.x < 7.1.16, 7.2.x < 7.2.4 Security Bypass Vulnerability (May 2018) - Linux

PHP is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PHP < 5.6.35, 7.x < 7.0.29, 7.1.x < 7.1.16, 7.2.x < 7.2.4 Security Bypass Vulnerability (May 2018) - Windows

PHP is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

Code injection

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests...

Sendio ESP Information Disclosure Vulnerability

Exploit for jsp platform in category web applications 1. Advisory Information Title: Sendio ESP Information Disclosure Vulnerability Advisory ID: CORE-2015-0010 Advisory URL: http://www.coresecurity.com/advisories/sendio-esp-information-disclosure-vulnerability Date published: 2015-05-22 Date of...

PT-2003-1135 · Polycom · Polycom Viewstation

Name of the Vulnerable Software and Affected Versions: Polycom ViewStation versions prior to 7.2.4 Description: The issue allows remote attackers to guess usernames and passwords via a brute force attack because the Telnet service does not restrict the number of failed login attempts...