2202 matches found
Xen 安全漏洞
Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
CVE-2010-0474
CVE-2010-0474 is listed as part of Debian WebKit vulnerabilities in DSA-2188-1. The affected package is webkit (GTK+ WebKit), with multiple CVEs including CVE-2010-0474. Debian states these problems were fixed in the stable distribution (squeeze) with version 1.2.7-0+squeeze1 (and 1.2.7-1 for whe...
CVE-2021-41741
CVE-2021-41741 is addressed in the openSUSE/OpenSSL Nextcloud updates. The issue is described as high memory usage when generating a preview for a broken image in Nextcloud Server. Affected software is Nextcloud Server (self-hosted cloud platform); the root cause is related to image preview handl...
CVE-2021-44597
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43857. Reason: This candidate is a reservation duplicate of CVE-2021-43857. Notes: All CVE users should reference CVE-2021-43857 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
CVE-2021-36814
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...
CVE-2016-3050
IBM OpenPages GRC Platform exposes sensitive information to authenticated users via error logs (CVE-2016-3050). Affected: OpenPages versions 7.1–7.3. Root cause: information disclosure through logging. Base CVSS 4.3. Remediation: apply fixes per version—7.3Fix Pack 1 (7.3.0.1) or later; 7.2Fix Pa...
CVE-2019-4232
The IBM Security Bulletin for CVE-2019-4232 discloses a vulnerability in IBM UrbanCode Deploy where an authenticated user could retrieve sensitive values from the REST API, enabling potential follow-on attacks. Affected products/versions include IBM UrbanCode Deploy 7.0–7.0.2.2 and 6.2–6.2.7.4. R...
CVE-2021-33517
CVE-2021-33517 and CVE-2021-36090 are vulnerabilities in Apache Commons Compress that affect IBM WebSphere Liberty (and WebSphere Liberty-based bundles) used in IBM Cloud Pak for Applications and IBM WebSphere Application Server families. The issues cause denial of service through memory-related ...
CVE-2019-4524
IBM Db2 for Linux, UNIX and Windows contains CVE-2019-4524, an information-disclosure vulnerability that exposes remote storage credentials to privileged users after running LOAD or UPDATE ALERT CFG through the ADMIN_CMD() stored procedure. Affected are all fix-pack levels of Db2 V9.7, V10.1, V10...
CVE-2019-4607
IBM InfoSphere Information Governance Catalog and Information Server on Cloud are affected by CVE-2019-4607, a privilege-escalation issue. An authorized user could access governance and information-asset details and modify lineage flows used to calculate data processing. Affected products/version...
CVE-2017-1123
CVE-2017-1123 is an escal ation of privilege in the IBM DS8000 Hardware Management Console (HMC) service interface. The IBM bulletin lists affected models (DS8880/DS8870/DS8800) and indicates affected code levels where exposure exists; a patch set CVE_1Q2018_v1.0 is available to remediate all lis...
CVE-2018-1942
IBM Emptoris Supplier Lifecycle Management (SLM) could disclose highly sensitive information via detailed error messages. Affected versions include 10.0.0.x through 10.1.3.x. Root cause: overly verbose error reporting exposing information in some features. CVSS base score reported as 5.3. Remedia...
CVE-2019-4714
IBM InfoSphere Information Server family is affected by CVE-2019-4714, a cross-site scripting vulnerability that allows embedding arbitrary JavaScript in the Web UI and could lead to credentials disclosure within a trusted session. Affected products/versions include InfoSphere Information Server ...
CVE-2019-4245
CVE-2019-4245 is addressed in IBM Cognos TM1 via an unquoted Windows search path vulnerability that could allow a local user to execute arbitrary code with elevated privileges by placing a malicious file named like a legitimate file. The IBM Security Bulletin for TM1 (and Planning Analytics ecosy...
CVE-2019-4615
IBM InfoSphere Information Server and InfoSphere Information Server on Cloud (version 11.7) are affected by an information disclosure vulnerability identified as CVE-2019-4615. The issue allows exposure of sensitive data via the displayed version numbers of installed software. Affected products r...
CVE-2018-1527
Affected software : IBM i2 Analyst’s Notebook (Premium) versions around 9.0.8. Vulnerability : XML Entity Injection (XXE) when processing XML during import (Cellebrite, XRY, Notebook Exchange from the Import menu). Root cause : processing XML data with external entities that can call out to exter...
CVE-2019-4221
IBM Cognos Analytics is affected by CVE-2019-4221 via DOM-based link manipulation. Affected products include IBM Cognos Analytics 11.1 and 11.0. The issue allows an attacker to manipulate links in the Web UI to facilitate various attacks. remediation is to apply the provided fixes: Cognos Analyti...