CVE-2021-29744

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 2016...

IBM Maximo Asset Management 跨站脚本漏洞

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution enables the management of all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control over those assets.IBM Maximo...

CVE-2021-20811

Cross-site scripting vulnerability in List of Assets screen of Movable Type Movable Type 7 r.4903 and earlier Movable Type 7 Series, Movable Type 6.8.0 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.44 and...

Deposits don't work with fee-on transfer tokens

Handle cmichel Vulnerability details There are ERC20 tokens that may make certain customizations to their ERC20 contracts. One type of these tokens is deflationary tokens that charge a certain fee for every transfer or transferFrom. Others are rebasing tokens that increase in value over time like...

Six Apart Movable Type 跨站脚本漏洞

Six Apart Movable Type MT is a blogging system from Six Apart USA. The system includes features such as multiple users, comments, quotes, and topics. Six Apart Movable Type suffers from a cross-site scripting vulnerability that stems from the application's insufficient cleansing of user-supplied...

Six Apart Movable Type 跨站脚本漏洞

Six Apart Movable Type MT is a blogging system from Six Apart USA. The system includes features such as multiple users, comments, quotes, and topics. Six Apart Movable Type suffers from a cross-site scripting vulnerability that stems from the application's insufficient cleansing of user-supplied...

NASCENT RemKon Device Manager 代码问题漏洞

NASCENT RemKon Device Manager is an automated access control system solution. A remote code execution vulnerability exists in NASCENT RemKon Device Manager version 4.0.0.0, which stems from the asset/index.php image upload function in the software, which does not effectively restrict or validate...

Security Bulletin: IBM Maximo Asset Management is vulnerable to privilege escalation (CVE-2019-4449)

Summary IBM Maximo Asset Management could allow an authenticated user to escalate their permissions. Vulnerability Details CVEID: CVE-2019-4449 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to escalate their permissions. CVSS Base score: 5 CVSS Temporal Score: See: fo...

Adobe Bridge out-of-bounds read vulnerability (CNVD-2021-63273)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain an out-of-bounds read vulnerability. An attacker could exploit the vulnerability to cause a memory leak...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63266)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge out-of-bounds read vulnerability (CNVD-2021-63274)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain an out-of-bounds read vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63268)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63269)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge Heap Buffer Overflow Vulnerability (CNVD-2021-63280)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge are vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to execute arbitrary code...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63272)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to cause a denial of service...

Adobe Bridge memory out-of-bounds access vulnerability

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge out-of-bounds write vulnerability (CNVD-2021-63281)

Adobe Bridge, a free digital asset management application from Adobe, is vulnerable to an out-of-bounds write vulnerability in Adobe Bridge 11.1 and earlier. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63267)

Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

SolarWinds 2.0 Could Ignite Financial Crisis – Podcast

Could a cyberattack spark the next financial crisis? Following the calamitous, widespread SolarWinds attacks in April, that’s exactly what the New York State Department of Financial Services DFS has suggested. “This incident confirms that the next great financial crisis could come from a...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2020-13938, CVE-2021-30641)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...