Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a stored cross-site scripting vulnerability (CVE-2025-36000)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a stored cross-site scripting vulnerability with the adminCenter-1.0 feature enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

QNAP License Center 跨站脚本漏洞

QNAP License Center is a certificate center from Taiwan, China-based QNAP Technology QNAP. A cross-site scripting vulnerability exists in QNAP License Center that stems from a cross-site scripting attack that could result in bypassing security mechanisms or reading application data...

PT-2025-35254

Name of the Vulnerable Software and Affected Versions QNAP License Center versions prior to 1.8.51 QNAP License Center versions prior to 1.9.51 Description A cross-site scripting XSS vulnerability affects QNAP operating system versions. A remote attacker gaining an administrator account can explo...

CVE-2025-9195

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service...

[R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.4.x, 6.5.1 and 6.6.0: SC-202508.1

R1 Stand-alone Security Patches Available for Tenable Security Center versions 6.4.x, 6.5.1 and 6.6.0: SC-202508.1 Arnie Cabral Thu, 08/28/2025 - 11:18 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components Apache, PHP, sqlit...

PT-2025-35123

Name of the Vulnerable Software and Affected Versions Solidigm DC Products affected versions not specified Description Improper input validation in the firmware may allow an attacker with local access to cause a Denial of Service. Recommendations At the moment, there is no information about a new...

IBM Cognos Command Center Code Execution Vulnerability

IBM Cognos Command Center is a solution for automating business processes that simplifies operational complexity across multiple software environments by allowing users to view, execute and monitor automated processes through a single interface. A code execution vulnerability exists in IBM Cognos...

IBM Cognos Command Center Clickjacking Vulnerability

IBM Cognos Command Center is a solution for automating business processes that simplifies operational complexity across multiple software environments by allowing users to view, execute and monitor automated processes through a single interface. A clickjacking vulnerability exists in IBM Cognos...

IBM Cognos Command Center Redirection Vulnerability

IBM Cognos Command Center is a solution for automating business processes that simplifies operational complexity across multiple software environments by allowing users to view, execute and monitor automated processes through a single interface. A redirection vulnerability exists in IBM Cognos...

CVE-2024-13980

H3C Intelligent Management Center IMC versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters,...

CVE-2024-13984

QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the rptsvr component that allows unauthenticated attackers to upload files to arbitrary locations on the server. The /rptsvr/upload endpoint fails to sanitize the filename paramete...

CVE-2024-13984

QiAnXin TianQing Management Center affected versions up to 6.7.0.4130 contain a path traversal flaw in the rptsvr/upload endpoint. The filename in multipart form-data requests isn’t properly sanitized, enabling unauthenticated attackers to upload files to arbitrary locations on the server, potent...

Vulnerabilities fixed in IBM Cognos Command Center

IBM has fixed vulnerabilities in IBM Cognos Command Center Versions 10.2.4.1 and 10.2.5. The vulnerabilities in IBM Cognos Command Center allow malicious actors to hijack victims' click actions by tricking them into navigating to a malicious Web site. This can lead to further attacks that...

H3C Intelligent Management Center 安全漏洞

H3C Intelligent Management Center is an integrated network management software platform from China's Xinhua San H3C. A security vulnerability exists in H3C Intelligent Management Center E0632H07 and prior versions, which stems from improper handling of JSF ViewState and could lead to remote comma...

PT-2025-34939 · H3C · H3C Intelligent Management Center

Name of the Vulnerable Software and Affected Versions: H3C Intelligent Management Center IMC versions up to and including E0632H07 Description: H3C Intelligent Management Center IMC contains a remote command execution issue in the /byod/index.xhtml endpoint. Improper handling of the...

Cisco NX-OS Software 代码问题漏洞

Cisco NX-OS Software is a set of data center-grade operating system software used by switches from Cisco USA. A code issue vulnerability exists in Cisco NX-OS Software that stems from improper handling of PIM6 temporary data, which could lead to a denial of service attack...

Cisco NX-OS Software 操作系统命令注入漏洞

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. Cisco NX-OS Software suffers from an operating system command injection vulnerability that stems from insufficient user input validation, which can be exploited by an...

ROS-20250827-07

A vulnerability in GLPI's asset management and data center management software is related to improper neutralization of HTML tags associated with scripts on a web page. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code GLPI asset and data center...

Linux Distros Unpatched Vulnerability : CVE-2020-13170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary da...

CVE-2025-2697

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to...