Archiv pro měsíc: Březen 2017

SecuritTeam.com: IBM Qradar Security Information And Event Manager 7.2.6 Execute Code Vulnerability

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue.

SecuritTeam.com: IBM Connections 4.5.0.0 CSRF Vulnerability

Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page.

SecuritTeam.com: IBM Connections 4.5.0.0 CSRF Vulnerability

Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page.

SecuritTeam.com: IBM Connections 4.5.0.0 CSRF Vulnerability

Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page.

SecuritTeam.com: Adobe Acrobat Dc 15.006.30201 Continuous Classic Execute Code Vulnerability

Adobe Acrobat Dc is prone to a local code-execution vulnerability.This allows a local attacker to exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts may result in a denial-of-service condition.

SecuritTeam.com: Adobe Acrobat Dc 15.006.30201 Continuous Classic Execute Code Vulnerability

Adobe Acrobat Dc is prone to a local code-execution vulnerability.This allows a local attacker to exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts may result in a denial-of-service condition.

SecuritTeam.com: Adobe Acrobat Dc 15.006.30201 Continuous Classic Execute Code Vulnerability

Adobe Acrobat Dc is prone to a local code-execution vulnerability.This allows a local attacker to exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts may result in a denial-of-service condition.