Archive
July 2018
Vulnerabilities first published in this month (UTC), newest first.
21 results · Clear filters · Feed
-
Low 3.3
The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if…
-
Low 3.7
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if t…
-
Low 3.3
An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP fi…
-
Low 3.7
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins-mailer-plugin
jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have…
-
Low 3.3
An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insuffi…
-
Low 2.6
It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Dat…
-
Low 3.3
A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause t…
-
Low 3.3
A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the appl…
-
Low 2.6
Undertow Request Smuggling vulnerability
It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.
-
Low 2.3
In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an applic…
-
Low 3.5
Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomp…
-
Low 3.5
An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1…
-
Low 3.5
A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user…
-
Low 2.2
Improper Input Validation in ansible
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
-
Low 3.4
McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability
Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.
-
Low 2.4
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passw…
-
Low 3.8
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default…
-
Low 3.7
IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores sensitive information in…
-
Low 3.5
Certificate Revocation Check failure
Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation.
-
Low 3.1
Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.…
-
Low 3.7
An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: …