Archive
February 2017
Vulnerabilities first published in this month (UTC), newest first.
1,041 results · Feed
-
Unscored —
EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configurati…
-
Unscored —
EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configurati…
-
Unscored —
EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5…
-
Unscored —
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by t…
-
Unscored —
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker …
-
Unscored —
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 uses an inadequate account lockout setting that could allow a remote attac…
-
Unscored —
IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users. The information can…
-
Unscored —
IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to…
-
Unscored —
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privi…
-
Unscored —
The write_ujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service …
-
Unscored —
The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of…
-
Unscored —
The process_file function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of serv…
-
Unscored —
The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of…
-
Unscored —
The build_huffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of ser…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enable…
-
Unscored —
The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative …
-
Unscored —
An issue was discovered in SageCRM 7.x before 7.3 SP3. The Component Manager functionality, provided by SageCRM, permit…
-
Unscored —
A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The AP_DocumentUI.asp web resource includes Utility…
-
High 7.5
PEAR core file overwrite vulnerability
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.
-
Unscored —
IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting, caused by impr…
-
Unscored —
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properl…
-
Unscored —
IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper va…
-
Unscored —
IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local …
-
Unscored —
IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a b…
-
Unscored —
IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design i…
-
Unscored —
IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResou…
-
Unscored —
IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…
-
Unscored —
IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in …
-
Unscored —
IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.…
-
Unscored —
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including p…
-
Unscored —
IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to ren…
-
Unscored —
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, …
-
Unscored —
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a s…
-
Unscored —
IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user.
-
Unscored —
IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code o…
-
Unscored —
IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This info…
-
Unscored —
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to exec…
-
Unscored —
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to exec…
-
Unscored —
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, …
-
Unscored —
IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from u…