11782 matches found
CVE-2025-54347
A Directory Traversal vulnerability exists in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw, categorized as CWE-22 , allows an attacker to write arbitrary files under certain conditions. Practical consequences include the ability for unauthorized ...
CVE-2025-54338
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...
CVE-2025-54563
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...
CVE-2025-54341
A security vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . The root cause is the presence of hard-coded configuration values , which is categorized as CWE-798 (Use of Hard-coded Credentials). The impact of this vulnerability ...
CVE-2025-54338
An Incorrect Access Control vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw allows an attacker to disclose user hashes . To remediate this issue, it is recommended to update the software to a version later than 6.1....
CVE-2025-54563
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...
CVE-2025-54347
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...
PT-2025-47972
Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description An incorrect access control issue exists in the Application Server component of the software. This allows for remote information disclosure. Recommendations Update to a...
CVE-2025-54563: Improper Access Control
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...
CVE-2025-54347: Improper Limitation of a Pathname to a Restricted Directory
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...
CVE-2025-54338: Improper Access Control
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...
CVE-2025-54341: Use of Hard-coded Credentials
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values...
Security Bulletin: Multiple security vulnerabilities has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool/OMNIbus WebGUI due to the October 2025 CPU
Summary Websphere Application Server WAS is shipped as a component of IBM Tivoli Netcool/OMNIbus WebGUI. Information about security vulnerabilities affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...
The vulnerability of SAP NetWeaver Java Application Server’s web applications stems from incorrect path name restrictions for the restricted access catalog. This allows attackers to gain unauthorized access to protected information.
The vulnerability of SAP NetWeaver Java Application Server web applications is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Desktop Alert Unspecified Vulnerability in PingAlert (CNVD-2025-29434)
Desktop Alert PingAlert is a network status monitoring tool developed by DesktopAlert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. An unspecified vulnerability exists in Desktop Alert PingAlert, which arises from the presence of corrupt or insecu...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by an SMTP injection vulnerability due to Jakarta Mail (CVE-2025-7962)
Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by an SMTP injection vulnerability in the Jakarta Mail library. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by an SMTP injection vulnerability due to Jakarta Mail (CVE-2025-7962)
Summary IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by an SMTP injection vulnerability in the Jakarta Mail library. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...
Security Bulletin: IBM Engineering Test Management is affected by a denial of service due to WebSphere Application Server traditional.
Summary IBM WebSphere Application Server shipped with IBM Engineering Test Management is affected by a denial of service vulnerability CVE-2025-36099. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...
CVE-2025-54342
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exposure of Sensitive Information because of Incompatible Policies...