Security Bulletin: Security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced. IBM WebSphere Liberty has been updated within IBM CICS TX Advanced to address these vulnerabilities. Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before...

CVE-2020-7712 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2020-15095 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2020-20969

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umt3ama2b...

CVE-2020-5504

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umt5zah2b...

CVE-2020-15716

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umsvm6t2b...

CVE-2020-15718

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umsygjp2b...

CLSA-2025-1764858279 jackson-databind: Fix of 2 CVEs

Removed CVE-2020-36518.patch: jackson-databind 2.14.1-1 is not affected - Rebuilt with the CVE-2025-52999: fixed jackson-core version...

Exploit for Prototype Pollution in Datatables Datatables.Net

CVE-2020-28458 Affected versions of this package are vulnerabl...

Prototype Pollution loadash.pick Dependency Vulnerability in Jira Software Data Center and Server

This High severity Prototype Pollution vulnerability known as CVE-2020-8203 was introduced in 10.3.0 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 7.4 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H allows an unauthenticated attacker to take...

Intel® Smart Sound Technology Advisory

Summary: A potential security vulnerability in Intel® Smart Sound Technology may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0583 Description: Improper access control in the subsystem for Intel...

CVE-2020-36788

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

Security Bulletin: WebSphere Application Server Liberty is could provide weaker than expected security due to crypto.js

Summary WebSphere Application Server Liberty is could provide weaker than expected security due to crypto.jsCVE-2020-36732 Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an...

📄 RosarioSIS 6.7.2 Cross Site Scripting

RosarioSIS version 6.7.2 suffers from multiple cross site scripting vulnerabilities. Exploit Title: RosarioSIS 6.7.2 - Cross-Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://gitlab.com/francoisjacquet/rosariosis Software Link:...

📄 PluckCMS 4.7.10 Arbitrary File Upload

PluckCMS version 4.7.10 suffers from an arbitrary file upload vulnerability. Exploit Title: PluckCMS 4.7.10 - Unrestricted File Upload Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/pluck-cms/pluck/ Software Link: https://github.com/pluck-cms/pluck/ Version: 4.7.1...

RosarioSIS 6.7.2 - Cross Site Scripting (XSS)

Exploit Title: RosarioSIS 6.7.2 - Cross Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://gitlab.com/francoisjacquet/rosariosis Software Link: https://gitlab.com/francoisjacquet/rosariosis Version: 6.7.2 Tested on: Windows CVE : CVE-2020-15716 Proof Of Concep...

ROOT-OS-DEBIAN-11-CVE-2020-23903 CVE-2020-23903 in rootio-speex - Patched by Root

Root has patched CVE-2020-23903 in the rootio-speex package for Root:Debian:11. Multiple fixed versions available...

Advisory ROSA-SA-2025-3106

Software: c-ares 1.13.0 OS: ROSA Virtualization 2.1 packageevrstring: c-ares-1.13.0-11.rv3 CVE-ID: CVE-2020-22217 BDU-ID: 2023-05898 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the aresparsesoareply function of the C-ares asynchronous DNS query library is related to an operation exceeding...

Exploit for OS Command Injection in Xstream

CVE-2020-26217 XStream RCE Exploit XStream remote code execut...

CVE-2020-11732

creationtimestamp| type| source ---|---|--- 2025-11-29 19:01:22+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-11732.yaml 2025-12-01 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4l4f62f...