CVE-2026-38979

ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative UI. In ajenti-core/aj/http.py, the core HTTP response path initializes an empty header list, forwards handler-added headers verbatim, and finalizes responses through WSGI startresponse without adding...

CVE-2022-38979

creationtimestamp| type| source ---|---|--- 2022-09-16 22:29:15+00:00| seen| https://t.me/cibsecurity/49954...

CVE-2022-38979

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-38979

Public technical details for CVE-2022-38979 are not provided in the connected documents. Monitor for updates from vendors/records to obtain affected products, impact, and remediation.

CVE-2021-38979

creationtimestamp| type| source ---|---|--- 2021-11-17 16:20:47+00:00| seen| https://t.me/cibsecurity/32477...

CVE-2021-38979

CVE-2021-38979 affects IBM Security Key Lifecycle Manager (TKLM) / IBM Security Guardium Key Lifecycle Manager. The root cause is the use of a one-way cryptographic hash on inputs that should not be reversible without also applying a salt, per the description. Affected versions include TKLM 3.0–3...