Security Bulletin: Vulnerability in Pivota Spring Framework affects watsonx.data

Summary Pivota Spring Framework could allow a remote attacker to execute arbitrary code on the system. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2016-1000027 DESCRIPTION: Pivota Spring Framework could allow a remote attacker to execute arbitrary code on the system, caused by...

CVE-2016-10517

creationtimestamp| type| source ---|---|--- 2025-02-07 16:19:42+00:00| seen| https://t.me/cvedetector/17492 2025-02-13 23:11:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4357 2025-02-14 01:17:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4411 2025-02-14 10:09:23+00:00| seen|...

CVE-2025-25069 Apache Kvrocks: Cross-Protocol Scripting Vulnerability

A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks. Since Kvrocks didn't detect if "Host:" or "POST" appears in RESP requests, a valid HTTP request can also be sent to Kvrocks as a valid RESP request and trigger some database operations, which can be dangerous when it is chained...

CVE-2016-15004

A vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to injection. The attack can be launched remotely. Upgrading to version 1.6.1.1 is able to address this issue. ...

CVE-2016-15042

The Frontend File Manager versions 4.0, N-Media Post Front-end Form versions 1.1 plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the nmfilemanageruploadfile and nmpostfrontuploadfile AJAX actions. This makes it possible for unauthenticated...

CVE-2016-15002

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely...

CVE-2016-6918

Lexmark Markvision Enterprise MVE before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files...

K000149640: Multiple Perl vulnerabilities

Security Advisory Description CVE-2023-31486 HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2020-12723 regcomp.c in Perl before 5.30.3 allows a buffer overflow...

Security Bulletin: Vulnerabilities in zlib can affect watsonx.data

Summary zlib is vulnerable to denial of service attacks. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2016-9842 DESCRIPTION: zlib is vulnerable to a denial of service, caused by an undefined left shift of negative number. By persuading a victim to open a specially crafted documen...

perl-Compress-Raw-Zlib-2.213-1.1 on GA media (moderate)

perl-Compress-Raw-Zlib-2.213-1.1 on GA media Announcement ID: openSUSE-SU-2025:14656-1 Rating: moderate Cross-References: CVE-2016-9843 CVE-2018-25032 CVSS scores: CVE-2018-25032 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves 2...

perl-IO-Compress-2.213.0-1.1 on GA media (moderate)

perl-IO-Compress-2.213.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14657-1 Rating: moderate Cross-References: CVE-2016-1238 CVSS scores: CVE-2016-1238 SUSE : 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

CVE-2016-2568 affecting package polkit 0.119-4

CVE-2016-2568 affecting package polkit 0.119-4. No patch is available currently...

CVE-2016-9179 affecting package lynx 2.9.0~dev.9-5

CVE-2016-9179 affecting package lynx 2.9.0dev.9-5. This CVE either no longer is or was never applicable...

CVE-2016-4912 affecting package openslp 2.0.0-26

CVE-2016-4912 affecting package openslp 2.0.0-26. No patch is available currently...

CVE-2016-2124 affecting package samba 4.12.5-7

CVE-2016-2124 affecting package samba 4.12.5-7. No patch is available currently...

CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21

CVE-2016-1000104 affecting package modfcgid 2.3.9-21. No patch is available currently...

CVE-2016-2568 affecting package polkit 0.116-7

CVE-2016-2568 affecting package polkit 0.116-7. No patch is available currently...

CVE-2016-3709 affecting package libxml2 2.9.14-3

CVE-2016-3709 affecting package libxml2 2.9.14-3. This CVE either no longer is or was never applicable...

CVE-2016-9594

creationtimestamp| type| source ---|---|--- 2024-12-23 10:34:21+00:00| seen| https://mastodon.social/users/bagder/statuses/113701686583617323 2024-12-23 10:35:46+00:00| seen| https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3ldxq73o54r72...

Oracle Siebel CRM (April 2016 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2016 CPU advisory. - Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 8.1.1...