Vulnerabilities > Low
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-01-11 | CVE-2017-1478 | Information Exposure vulnerability in IBM Security Access Manager 9.0 Firmware IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on the system. | 3.3 |
2018-01-04 | CVE-2017-1699 | Incorrect Permission Assignment for Critical Resource vulnerability in IBM Websphere MQ IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. | 3.3 |
2018-01-04 | CVE-2017-1669 | Information Exposure vulnerability in IBM Security KEY Lifecycle Manager IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. | 3.7 |
2017-12-27 | CVE-2017-17864 | Information Exposure vulnerability in multiple products kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local users to obtain potentially sensitive address information, aka a "pointer leak." | 3.3 |
2017-12-22 | CVE-2017-15321 | Information Exposure vulnerability in Huawei Fusionsphere Openstack V100R006C000Spc102(Nfv) Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default. | 3.7 |
2017-12-22 | CVE-2017-15307 | Unspecified vulnerability in Huawei Honor 8 Firmware Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulnerability due to improper authorization configuration on specific device information. | 2.3 |
2017-12-20 | CVE-2017-17807 | Missing Authorization vulnerability in Linux Kernel The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c. | 3.3 |
2017-12-20 | CVE-2017-1270 | Session Fixation vulnerability in IBM Security Guardium IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. | 3.3 |
2017-12-20 | CVE-2017-1261 | Information Exposure vulnerability in IBM Security Guardium IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user. | 3.3 |
2017-12-13 | CVE-2017-15530 | Information Exposure vulnerability in Symantec Norton Family Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. | 3.3 |