Archive
6 July 2018
Vulnerabilities first published on this day (UTC), newest first.
96 results · Feed
-
Unscored —
All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerabil…
-
Low 3.1
Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.…
-
Medium 4.3
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Er…
-
Medium 5.4
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject …
-
Low 3.7
An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: …
-
Medium 4.4
IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via tr…
-
Medium 5.4
IBM Jazz based applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …
-
Medium 5.4
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject …
-
Medium 5.4
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject …
-
Medium 4.3
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that …
-
Medium 5.4
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows…
-
Medium 4.8
The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to …
-
High 7.3
Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Cl…
-
High 7.5
Mercurial Improper Input Validation vulnerability
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.
-
High 7.5
Mercurial Improper Input Validation vulnerability
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.
-
Critical 9.8
Mercurial mishandles integer addition and subtraction
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.