EUVD-2018-12047

Malware in sbrugna...

CVE-2025-1007 Improper Authorization in /user/namespace/{namespace}/details

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/namespace/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social media links. The same issues existed in...

Code injection

IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details to which they are not authorized. IBM X-Force ID: 140399...

CVE-2018-1468

IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details to which they are not authorized. IBM X-Force ID: 140399...

CVE-2018-1468: Exposure of Sensitive Information to an Unauthorized Actor

IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details to which they are not authorized. IBM X-Force ID: 140399...

PT-2018-12656

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 5.0.8.1 through 5.0.8.2 Description The issue allows a user to gain access to internal environment and sensitive API details without proper authorization. Recommendations For versions 5.0.8.1 and 5.0.8.2, at the moment...