2017

IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.

IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a

IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL s

IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclos

IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error mes

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attac

IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to obtain sensitive informati

IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive information in log files that

The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obta

Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that a

Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that ar

Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that a

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported vers

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin). Supported versions that ar

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI). The supported version t

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affecte

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Suppo

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version tha

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Cor

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponen

ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to pro

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive inform

NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remo

An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system

Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configu

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions

A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the s

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the serve

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to m