HPE Universal Configuration Management Database Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks
|
A vulnerability was reported in HPE Universal Configuration Management Database. A remote user can conduct cross-site scripting attacks.
|
Impact:
Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user information
|
|
|
IBM DB2 Buffer Overflow in db2convert Lets Local Users Execute Arbitrary Code
|
A vulnerability was reported in IBM DB2. A local user can obtain elevated privileges on the target system.
|
Impact:
Execution of arbitrary code via local system, User access via local system
|
|
|
IBM DB2 Buffer Overflow in db2licm Lets Local Users Obtain Root Privileges
|
A vulnerability was reported in IBM DB2. A local user can obtain root privileges on the target system.
|
Impact:
Execution of arbitrary code via local system, Root access via local system
|
|
|
IBM DB2 Buffer Overflows in db2exmig and db2exfmt Let Local Users Execute Arbitrary Code
|
Two vulnerabilities were reported in IBM DB2. A local user can obtain elevated privileges on the target system.
|
Impact:
Execution of arbitrary code via local system, User access via local system
|
|
|
Joomla! Multiple Flaws Let Remote Authenticated Users Modify ACLs and Execute Arbitrary Code, Remote Users Obtain Potentially Sensitive Information and Conduct Cross-Site Scripting Attacks, and Local Users Obtain Passwords
|
Multiple vulnerabilities were reported in Joomla!. A remote authenticated user can modify data on the target system. A remote authenticated user can execute arbitrary code on the target system. A remote user can obtain potentially sensitive information on the target system. A remote user can conduct cross-site scripting attacks. A local user can view the administrator password in certain cases.
|
Impact:
Disclosure of authentication information, Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via network
|
|
|
Previous Headlines Are Available:
See Our Summary Listing of the SecurityTracker Archives.
|
