Security Vulnerabilities - CVEs Published In August 2017
IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 127583.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-08-29
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128623.
CVSS Score
5.4
EPSS Score
0.002
Published
2017-08-29
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130677.
CVSS Score
5.4
EPSS Score
0.003
Published
2017-08-29
Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.
CVSS Score
9.8
EPSS Score
0.014
Published
2017-08-29
Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!.
CVSS Score
5.3
EPSS Score
0.003
Published
2017-08-29
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.
CVSS Score
7.5
EPSS Score
0.003
Published
2017-08-29
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.
CVSS Score
6.1
EPSS Score
0.004
Published
2017-08-29
Buffer overflow in mpg123 before 1.18.0.
CVSS Score
7.5
EPSS Score
0.011
Published
2017-08-29
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.
CVSS Score
7.5
EPSS Score
0.01
Published
2017-08-29
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.
CVSS Score
6.1
EPSS Score
0.01
Published
2017-08-29