Lucene search
+L

37 matches found

ATTACKERKB
ATTACKERKB
added 2021/10/06 12:00 a.m.7 views

CVE-2021-20489

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 197790...

8.8CVSS5.9AI score0.00397EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/06 12:00 a.m.6 views

CVE-2021-20372

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518...

4.3CVSS5.5AI score0.01247EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/09/23 5:15 p.m.5 views

CVE-2021-20563

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepath on the server which could be used in further attacks against the system. IBM X-Force ID: 19923...

4.3CVSS5.8AI score0.00727EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/23 5:15 p.m.7 views

CVE-2021-20485

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 197667...

4.3CVSS5.8AI score0.00982EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/09/23 12:00 a.m.10 views

IBM Sterling File Gateway 信息泄露漏洞

IBM Sterling File Gateway, an application for transferring files between internal and external partners, allows you to more securely and reliably transfer files with trading partners. IBM Sterling File Gateway version 2.2.0.0-6.1.0.3 is vulnerable to an information disclosure vulnerability. An...

4.3CVSS5.2AI score0.00982EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/16 9:15 p.m.9 views

CVE-2020-4658

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

6.1CVSS6AI score0.00721EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/05/28 12:00 a.m.7 views

Apple Windows Migration Assistant Windows Installer Component Dynamic Library Loading Vulnerability

Apple Windows Migration Assistant is an Apple application that supports the migration of data from Windows systems to Mac devices.Windows Installer is Apple Windows Migration Assistant's Windows Installer is the Windows installation program for Apple Windows Migration Assistant. A security...

7.8CVSS7.2AI score0.00469EPSS
SaveExploits0References1
Apple
Apple
added 2020/05/26 12:00 a.m.165 views

About the security content of Windows Migration Assistant 2.2.0.0

About the security content of Windows Migration Assistant 2.2.0.0 This document describes the security content of Windows Migration Assistant 2.2.0.0 v. 1A11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...

7.8CVSS7.9AI score0.00469EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/05 12:53 a.m.21 views

Security Bulletin: Information Disclosure Vulnerabilities Affect IBM Sterling File Gateway (CVE-2019-4423, CVE-2019-4280)

Summary IBM Sterling File Gateway has addressed the information disclosure vulnerabilities Vulnerability Details CVEID: CVE-2019-4423 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request...

5.3CVSS1AI score0.02675EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2019/09/30 4:15 p.m.9 views

CVE-2019-4280

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503...

5.3CVSS5.8AI score0.00827EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/09/30 12:00 a.m.6 views

IBM Sterling File Gateway Path Traversal Vulnerability

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A path traversal vulnerability exists in IBM Sterling File...

5.3CVSS6.8AI score0.02675EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/09/30 12:00 a.m.10 views

IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2019-34605)

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. An information disclosure vulnerability exists in IBM Sterlin...

5.3CVSS6.2AI score0.00827EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/09/30 12:00 a.m.11 views

PT-2019-17013 · Ibm · Ibm Sterling File Gateway

Name of the Vulnerable Software and Affected Versions: IBM Sterling File Gateway versions 2.2.0.0 through 6.0.1.0 Description: The issue allows sensitive information to be displayed in HTTP requests, which could potentially be used in further attacks against the system. Recommendations: For...

5.3CVSS5AI score0.00827EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2019/09/30 12:00 a.m.6 views

PT-2019-17075 · Ibm · Ibm Sterling File Gateway

Name of the Vulnerable Software and Affected Versions: IBM Sterling File Gateway versions 2.2.0.0 through 6.0.1.0 Description: The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary...

5.3CVSS5.2AI score0.02675EPSS
SaveExploits0References4
OSV
OSV
added 2018/12/28 4:29 p.m.8 views

CVE-2018-5203

DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

9.8CVSS6AI score0.0234EPSS
SaveExploits0References1
Prion
Prion
added 2011/09/23 11:55 p.m.24 views

Information disclosure

eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by apps/rmail/webmail/program/lib/Net/SMTP.php and certain other files...

5CVSS6.6AI score0.01335EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2011/09/23 11:00 p.m.26 views

CVE-2011-3737

eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by apps/rmail/webmail/program/lib/Net/SMTP.php and certain other files...

6.1AI score0.01335EPSS
SaveExploits1References3
Rows per page
Query Builder