1397 matches found
Security Bulletin: A security vulnerability in MongoDB Server affects IBM Cloud Pak for Multicloud Management Managed Service
Summary A security vulnerability in MongoDB Server affects IBM Cloud Pak for Multicloud Management Managed Service. Vulnerability Details CVEID: CVE-2020-7928 DESCRIPTION: MongoDB Server could allow a remote authenticated attacker to obtain sensitive information. By issuing a specially crafted...
Security Bulletin: A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Pak for Multicloud Management Managed Service
Summary A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Pak for Multicloud Management Managed Service. Vulnerability Details CVEID: CVE-2021-21366 DESCRIPTION: Node.js xmldom module could allow a remote attacker to bypass security restrictions, caused by improper...
Adobe Magento 授权问题漏洞
Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides features such as rights management, search engine and payment gateway. Adobe Magento suffers from an authorization issue vulnerability. The vulnerability is due to...
Adobe Magento 路径遍历漏洞
Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides rights management, search engine and payment gateway features. A path traversal vulnerability exists in Adobe Magento. The vulnerability exists due to an input...
D-Link DVA-2800 and DSL-2888A License Issue Vulnerability
The D-Link DVA-2800 and DSL-2888A is a wireless router from D-Link. It provides the ability to connect to a network. An authorization issue vulnerability exists in D-Link DVA-2800 and DSL-2888A firmware version 2.3, which can be exploited by an attacker to disclose stored credentials, leading to...
SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Catalog yy***_ed***.php
yycms is a movie and television system. yycms film and television system V2.3 version admin directory yyed.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
SQL injection vulnerability in yycms movie and TV system V2.3 admin directory yycms_list.php file
yycms is a movie and television system. yycms film and television system V2.3 version admin directory yyli.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Directory yy***_li***_ed***.php File
yycms is a movie and television system. yycms film and television system V2.3 version admin directory yylied.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
IBM Cloud Pak System Cross-Site Scripting Vulnerability (CNVD-2021-00888)
IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. A cross-site scripting vulnerability exists in IBM Cloud Pak System 2.3. An attacker could exploit the vulnerability to embed arbitrary JavaScript code in the Web UI that could...
IBM Cloud Pak System Cross-Site Scripting Vulnerability (CNVD-2021-00890)
IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. A cross-site scripting vulnerability exists in IBM Cloud Pak System 2.3. An attacker could exploit the vulnerability to embed arbitrary JavaScript code in the Web UI that could...
CVE-2020-4919
IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on the system. IBM X-Force ID: 191395...
CVE-2020-4917
IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191391...
Information disclosure
IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392...
CVE-2020-4919
CVE-2020-4919 affects IBM Cloud Pak System 2.3, where insufficient logout controls can let an authenticated privileged user impersonate another user. Root cause: inadequate session/logout handling on the system. The entry is supported by multiple sources (NVD/CVE, CNVD/Prion) indicating the same ...
CVE-2020-4928
IBM Cloud Pak System 2.3 is affected by CVE-2020-4928, where a local privileged attacker can upload arbitrary files by intercepting requests and modifying the file extension, potentially enabling arbitrary code execution on the server. The vulnerability affects the IBM Cloud Pak System 2.3 line a...
CVE-2020-4918
IBM Cloud Pak System 2.3 contains an information-disclosure flaw stemming from an insecure direct object reference in the Sales and Service Console of the Platform System Manager. A local privileged user could disclose sensitive data. Affected versions: Cloud Pak System 2.3 (per CVE-2020-4918). C...
CVE-2020-4916
The CVE-2020-4916 entry applies to IBM Cloud Pak System 2.3, where a cross-site scripting vulnerability in the Web UI allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The problem is tied to the IBM Cloud Pak System 2.3 stack (Web UI co...
CVE-2020-4917
CVE-2020-4917 affects IBM Cloud Pak System 2.3 and describes a cross-site request forgery vulnerability that could let an attacker perform malicious actions on behalf of a trusted user. The issue is documented with the affected product/version and the stated impact (unauthorized actions transmitt...
CVE-2020-4913
CVE-2020-4913 affects IBM Cloud Pak System 2.3. An information-disclosure issue could let a local privileged user view credential data via HTTP responses, exposing partial confidentiality with HIGH impact to credentials information. The known remediation per IBM notes is to upgrade to a fixed Clo...
