Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed in IBM Business Automation Manager Open Editions 9.5.0 Vulnerability Details CVEID:CVE-2026-33871 DESCRIPTION: Netty is an asynchronous, event-driven network application...

Security Bulletin: IBM Terracotta is affected by a Spring Security vulnerability that could allow Redirection to Untrusted Sites and Denial of Service (Dos) attacks

Summary IBM Terracotta uses Spring Security as an application security framework within the product. Vulnerability Details CVEID:CVE-2026-40988 DESCRIPTION: An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0-20260516144515 <=1.0.0.ee-20260528111216), com.eurodyn.qlack.fuse:qlack-fuse-aaa (>=3.9.8 <=3.9.9) +109 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=6.2.0 <=6.5.10)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.2.0, =1.0.0-20260516144515, =3.9.8, =1.6.0, =11.9.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =dce37d6e6c310e0d86c4f0d73f8846b8ef2f4432, =12.2, =15.1.1, =12.2, =12.2, =15.1.1, =15.1.2 and more Source cves:...

com.erudika:para-server (>=1.52.0 <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1 <=2.0.4) +3 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0-M1 <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0-M1, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-41694 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKSECURITY-17307750...

CVE-2021-41694

An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php...

CVE-2025-41694

creationtimestamp| type| source ---|---|--- 2025-12-09 07:58:11+00:00| seen| https://infosec.exchange/users/certvde/statuses/115688544042508118 2025-12-18 14:29:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741042129345385...

CVE-2024-41694 Cybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41694 Cybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2023-41694

creationtimestamp| type| source ---|---|--- 2023-10-10 12:29:59+00:00| seen| https://t.me/cibsecurity/71896...

CVE-2023-41694

Cross-Site Request Forgery CSRF vulnerability in Realbig Team Realbig For WordPress plugin = 1.0.3 versions...

CVE-2023-41694

CVE-2023-41694 is a Cross-Site Forgery (CSRF) vulnerability in Realbig For WordPress, affecting Realbig plugin versions

WordPress Realbig Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Realbig Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41694 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 394f5c1dc16e Credits Mika Required privilege...

K64829234: BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694

Security Advisory Description When an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed input can cause the mcpd process to terminate. CVE-2022-41694 Impact Traffic is disrupted while the mcpd process restarts. This vulnerability allows a remote, authenticated attacker to cause a...

CVE-2022-41694

creationtimestamp| type| source ---|---|--- 2022-10-20 02:20:46+00:00| seen| https://t.me/cibsecurity/51845 2025-05-08 18:24:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15566...

CVE-2022-41694

CVE-2022-41694 affects F5 BIG-IP and BIG-IQ: when an SSL key is imported, undisclosed input can cause the mcpd process to terminate, yielding a denial-of-service on the control plane. Affected are BIG-IP 16.1.x before 16.1.3; 15.1.x before 15.1.6.1; 14.1.x before 14.1.5; all 13.1.x; BIG-IQ 8.x be...

CVE-2022-41694 BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694

In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and BIG-IQ versions 8.x before 8.2.0.1 and all versions of 7.x, when an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed input can cause MCPD to terminate...

CVE-2021-41694

creationtimestamp| type| source ---|---|--- 2021-12-09 18:24:04+00:00| seen| https://t.me/cibsecurity/33698...

CVE-2021-41694

An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php...

CVE-2021-41694

CVE-2021-41694 affects Premiumdatingscript 4.2.7.7, with an Incorrect Access Control condition exposed through the password change procedure in requests\user.php. The vulnerability enables improper access control to the password change flow, as described in multiple sources (Red Hat, CNVD/CNNVD, ...