182 matches found
Apple Security Update: watchOS 10.0.2
Apple recommends to install security update watchOS 10.0.2 on devices Apple Watch Series 9 and Apple Watch Ultra 2...
DEBIAN-CVE-2023-41880
Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the WebAssembly i64x2.shrs instruction on x8664 platforms when the shift amount is a constant value that is larger than 32. Only x8664 is affected so a...
Vulnerabilities fixed in Zimbra
Vulnerabilities have been fixed in Zimbra. A malicious party could exploit vulnerabilities to gain access to system data, bypass a security measure, or launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the context of the victim's victim's browser, or...
CVE-2023-38750
In Zimbra Collaboration ZCS 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed...
CVE-2023-1917 PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 10.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2022-4522 CalendarXP cross site scripting
A vulnerability classified as problematic was found in CalendarXP up to 10.0.1. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 10.0.2 is able to address this issue. The name of the patch is...
CVE-2022-4522 CalendarXP cross site scripting
A vulnerability classified as problematic was found in CalendarXP up to 10.0.1. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 10.0.2 is able to address this issue. The name of the patch is...
IBM Security Verify Information Queue Information Disclosure Vulnerability (CNVD-2022-54888)
IBM Security Verify Information Queue using the acronym "ISIQ" is a cross-product integrator that uses Kafka technology and a publish/subscribe model to integrate data between IBM Security products. Security Verify Information Queue is vulnerable to information disclosure in version 10.0.2. An...
IBM Security Verify Information Queue Cross-Site Request Forgery Vulnerability (CNVD-2022-54907)
IBM Security Verify Information Queue is an integration product from IBM USA. It utilizes Kafka technology and a publish/subscribe model to integrate data between IBM Security products. A cross-site request forgery vulnerability exists in IBM Security Verify Information Queue version 10.0.2, whic...
IBM Security Verify Information Queue Information Disclosure Vulnerability (CNVD-2022-55635)
IBM Security Verify Information Queue is an integration product from IBM of America, Inc. Leverages Kafka technology and a publish/subscribe model to integrate data between IBM Security products. IBM Security Verify Information Queue version 10.0.2 is vulnerable to an information disclosure...
CVE-2022-35286
IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230814...
PT-2022-22688 · Ibm · Ibm Security Verify Information Queue
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue version 10.0.2 Description: The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery. Recommendations: F...
IBM Security Verify Information Queue 跨站请求伪造漏洞
IBM Security Verify Information Queue is an integration product from IBM USA. It utilizes Kafka technology and a publish/subscribe model to integrate data between IBM Security products. A cross-site request forgery vulnerability exists in IBM Security Verify Information Queue version 10.0.2, whic...
Information disclosure
IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 230818...
CVE-2022-35288
IBM Security Verify Information Queue (ISIQ) v10.0.2 is vulnerable to an information disclosure: a malformed request to regenerate an external API token causes an error message that exposes sensitive data. The IBM Security Bulletin confirms remediation in v10.0.3, which fixes the exposure. Affect...
CVE-2022-35288
IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 230818...
IBM Security Verify Information Queue 跨站请求伪造漏洞
IBM Security Verify Information Queue is an integration product from IBM of America, Inc. IBM Security Verify Information Queue version 10.0.2 contains a cross-site request forgery vulnerability that originates when a WEB application does not adequately verify that a request is from a trusted use...
PT-2022-22690 · Ibm · Ibm Security Verify Information Queue
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue version 10.0.2 Description: The issue allows a user to obtain sensitive information that could be used in further attacks against the system. Recommendations: For IBM Security Verify Information Queue...
CVE-2022-35288
IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 230818...
CVE-2022-35283
Summary: CVE-2022-35283 affects IBM Security Verify Information Queue (ISIQ) version 10.0.2. An authenticated user can trigger a denial of service via a specially crafted HTTP request. The issue is addressed in ISIQ 10.0.3, which implements stricter URL validation to prevent this DoS. CVSS base s...