CVE-2017-5534 Improper sandboxing of a third-party component in tibbr

The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affected releases are TIBCO Software Inc. tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0...

CVE-2017-1550: Undefined Security Weakness

IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290...

CVE-2017-9716: Undefined Security Weakness

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications...

CVE-2017-1000406: Undefined Security Weakness

OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared e.g. via restart...

The vulnerability of Brother printer’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to gain access to the devices.

The vulnerability of Brother’s microprogramming software is related to deficiencies in the authentication process. After a failed attempt to access the HTTP response, the valid AuthCookie is retained. Exploiting this vulnerability could allow a malicious actor to gain access to the device remotel...

PYSEC-2017-26

Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data...

UBUNTU-CVE-2017-1000246

Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data...

DEBIAN-CVE-2017-1000246

Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data...

DEBIAN-CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

UBUNTU-CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

nodejs ejs denial of service vulnerability

nodejs ejs is an embedded JavaScript template with flow control, customizable delimiters and escaped output. A security vulnerability exists in the 'ejs.renderFile' function in nodejs ejs versions prior to 2.5.5, which stems from weak input validation. An attacker can exploit the vulnerability to...

CVE-2017-1000168: Undefined Security Weakness

sodiumoxide 0.0.13 and older scalarmult vulnerable to degenerate public keys...

CVE-2017-0859: Undefined Security Weakness

Another vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131...

The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

DALIM SOFTWARE ES Core 5.0 build 7184.1 User Enumeration Weakness

Description The weakness is caused due to the 'Login.jsp' script enumerating the list of valid usernames when some characters are provided via the 'login' parameter. Vendor Dalim Software GmbH - https://www.dalim.com Affected Version ES/ESPRiT 5.0 build 7184.1 build 7163.2 build 7163.0 build 7135...

CVE-2017-16521: Undefined Security Weakness

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used...

Remote Command Execution Vulnerability in the Backend of Esaote E3 Omni-Channel Retail Management Software

E3 omni-channel retail management software is Esaote's e-commerce ERP system for online sales in the fashion industry, integrating Taobao interface, independent B2C mall system, advanced order processing system, logistics and warehousing system, network marketing and promotion system, and...

CVE-2017-1000145: Undefined Security Weakness

Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments...

The vulnerability of Broadcom’s Wi-Fi driver for Android operating systems allows attackers to increase their privileges.

The vulnerability of Broadcom’s Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...