Lucene search
+L

223 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.57 views

Security Bulletin: Vulnerabilities in IBM Java SDK affects IBM SAN Volume Controller and Storwize Family (CVE-2014-6593, CVE-2015-0410)

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 that is used by IBM SAN Volume Controller and Storwize Family. These issue was disclosed as part of the IBM Java SDK updates in Jan 2015. Vulnerability Details CVEID: CVE-2014-6593 DESCRIPTION: A fla...

5CVSS4.7AI score0.67234EPSS
SaveExploits6Affected Software5
OpenVAS
OpenVAS
added 2023/03/08 12:00 a.m.35 views

Debian: Security Advisory (DSA-1996-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.5AI score0.0838EPSS
SaveExploits11References3
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/18 1:45 a.m.57 views

Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM FlashSystem 840 and IBM FlashSystem V840, -AE1 models, (CVE-2014-6593 and CVE-2015-0410)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.6.0 that is used by FlashSystem 840. These issues were disclosed as part of the IBM Java SDK updates in January 2015 Vulnerability Details CVEID: CVE-2015-0410 DESCRIPTION: An unspecified vulnerability...

5CVSS4.9AI score0.67234EPSS
SaveExploits6Affected Software2
SUSE CVE
SUSE CVE
added 2023/02/15 5:23 a.m.9 views

SUSE CVE-2015-0410

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security...

5CVSS6.9AI score0.05032EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2023/01/20 12:00 a.m.47 views

CVE-2023-0410 Cross-site Scripting (XSS) - Generic in builderio/qwik

Cross-site Scripting XSS - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5...

6.1CVSS6.2AI score0.00458EPSS
SaveExploits0References2
CVE
CVE
added 2023/01/20 12:00 a.m.70 views

CVE-2023-0410

CVE-2023-0410 affects builder.io/qwik prior to 0.1.0-beta5. The vulnerability is a Cross-site Scripting (XSS) issue caused by improper sanitization in render-ssr.ts, enabling injection and execution of arbitrary JavaScript. Multiple sources (NVD/Red Hat/OSV/Veracode/GHSA) confirm the same vector ...

6.1CVSS6AI score0.00458EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/20 12:00 a.m.7 views

CVE-2023-0410 Cross-site Scripting (XSS) - Generic in builderio/qwik

Cross-site Scripting XSS - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5...

6.1CVSS6.4AI score0.00458EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/15 6:54 p.m.61 views

Security Bulletin: Multiple vulnerabilities in the IBM SDK for Java™ Technology Edition January 2015 CPU affect WebSphere Process Server

Summary There are multiple vulnerabilities in IBM SDK for Java™ Technology Edition that is used by WebSphere Process Server. These issues were disclosed as part of the IBM SDK for JavaTechnology Edition updates in January 2015. Vulnerability Details CVEID: CVE-2014-3566 DESCRIPTION: Multiple...

5CVSS4AI score0.99999EPSS
SaveExploits13Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/19 11:26 p.m.28 views

Security Bulletin: Multiple vulnerabilities in the IBM SDK for Java™ Technology Edition January 2015 CPU affect WebSphere Business Services Fabric

Summary There are multiple vulnerabilities in IBM® SDK for Java™ Technology Edition that is used by WebSphere Business Services Fabric. These issues were disclosed as part of the IBM SDK for Java™ Technology Edition updates in January 2015. Vulnerability Details CVEID: CVE-2014-3566 DESCRIPTION:...

5CVSS4AI score0.99999EPSS
SaveExploits13Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/19 6:23 p.m.38 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9, v7.5 & v7.2.2, IBM Tivoli Asset Discovery for Distributed v7.5 & v7.2.2 and IBM Endpoint Manager for Software Use Analysis v9 - CVE-2014-6593, CVE-2015-0400, C

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM License Metric Tool v9, v7.5 & v7.2.2, IBM Tivoli Asset Discovery for Distributed v7.5 & v7.2.2 and IBM Endpoint Manager for Software Use Analysis v9. These issues were disclosed as part of the IBM...

5CVSS4.8AI score0.67234EPSS
SaveExploits6Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/20 5:04 p.m.43 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Global Name Management 5.0 (CVE-2014-6593, CVE-2015-0400, CVE-2015-0410)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6.0 that is used by IBM WebSphere Application Server embedded in IBM InfoSphere Global Name Management. These issues were disclosed as part of the IBM Java SDK updates in January 2015. Vulnerability Details...

5CVSS5.3AI score0.67234EPSS
SaveExploits6Affected Software1
NVD
NVD
added 2022/03/07 9:15 a.m.24 views

CVE-2022-0410

The WP Visitor Statistics Real Time Traffic WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection...

8.8CVSS0.01318EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/03/07 8:16 a.m.30 views

CVE-2022-0410 WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection

The WP Visitor Statistics Real Time Traffic WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection...

9.1AI score0.01318EPSS
SaveExploits2References1
CVE
CVE
added 2022/03/07 8:16 a.m.109 views

CVE-2022-0410

CVE-2022-0410 affects the WP Visitor Statistics (Real Time Traffic) WordPress plugin prior to 5.6. The refUrlDetails AJAX action uses an unsanitized id parameter in a SQL statement, and this action is accessible to any authenticated user, leading to a SQL injection. Impact stated across connected...

8.8CVSS8.9AI score0.01318EPSS
SaveExploits2References1Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.29 views

Mageia: Security Advisory (MGASA-2020-0410)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.0218EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.28 views

Mageia: Security Advisory (MGASA-2015-0037)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.5AI score0.67234EPSS
SaveExploits6References6
Photon
Photon
added 2021/10/30 12:00 a.m.45 views

Moderate Photon OS Security Update - PHSA-2021-0410

Updates of 'linux', 'linux-esx', 'linux-aws', 'linux-secure' packages of Photon OS have been released...

6.5CVSS2.1AI score0.01245EPSS
SaveExploits0
Circl
Circl
added 2021/10/25 6:13 p.m.8 views

CVE-2021-0410

creationtimestamp| type| source ---|---|--- 2021-10-25 18:13:47+00:00| seen| https://t.me/cibsecurity/31122...

5.5CVSS5.5AI score0.00116EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/25 2:15 p.m.10 views

CVE-2021-0410

In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID: ALPS05561360...

5.5CVSS6.2AI score0.00116EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/10/25 1:16 p.m.41 views

CVE-2021-0410

In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID: ALPS05561360...

5.4AI score0.00116EPSS
SaveExploits0References1
Rows per page
Query Builder