Lucene search
K

2867 matches found

NVD
NVD
added 2023/05/05 3:15 p.m.18 views

CVE-2023-22874

IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216...

5.5CVSS5.6AI score0.00206EPSS
Exploits0References2
Prion
Prion
added 2023/05/05 3:15 p.m.18 views

Design/Logic Flaw

IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216...

1.9CVSS5.5AI score0.00206EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/05/05 2:57 p.m.74 views

CVE-2023-22874

CVE-2023-22874 affects IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS, vulnerable to DoS when processing configuration files (CVSS 5.5, LOCAL with UI required). Connected docs confirm the affected MQ client versions and the DoS impact; no exploit details are provided. Remediation path in the linked I...

5.5CVSS5.3AI score0.00206EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/05/05 2:57 p.m.25 views

CVE-2023-22874 IBM MQ denial of service

IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216...

5.5CVSS5.5AI score0.00206EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/05/05 2:57 p.m.7 views

CVE-2023-22874 IBM MQ denial of service

IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216...

5.5CVSS5.3AI score0.00206EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/05/05 12:0 a.m.3 views

IBM MQ 资源管理错误漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. It provides a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ Clients versions 9.2 CD, 9.3 CD, and 9.3 LTS that stems from...

5.5CVSS5.6AI score0.00206EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2023/05/04 3:59 p.m.5 views

codehaus-plexus: Directory Traversal

A flaw was found in codeplex-codehaus. A directory traversal attack also known as path traversal aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash ../" sequences and their variations or by using absolute file paths, it may be possib...

7.5CVSS5.8AI score0.01347EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/28 6:17 p.m.28 views

Security Bulletin: IBM MQ Clients are vulnerable to a denial of service attack (CVE-2023-22874)

Summary An issue was identified that may cause IBM MQ Clients to be vulnerable to a denial of service attack when processing configuration files. Vulnerability Details CVEID:CVE-2023-22874 DESCRIPTION: IBM MQ Clients are vulnerable to a denial of service attack when processing configuration files...

5.5CVSS5.5AI score0.00206EPSS
Exploits0Affected Software1
NVD
NVD
added 2023/04/28 1:15 p.m.18 views

CVE-2022-41397

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key "LandlordPassKey" to encrypt and decrypt secrets stored in configuration files and in database tables...

9.8CVSS9.4AI score0.00675EPSS
Exploits0References1
Prion
Prion
added 2023/04/28 1:15 p.m.15 views

Hardcoded credentials

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key "LandlordPassKey" to encrypt and decrypt secrets stored in configuration files and in database tables...

7.5CVSS9.3AI score0.00675EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/28 12:0 a.m.11 views

CVE-2022-41397

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key "LandlordPassKey" to encrypt and decrypt secrets stored in configuration files and in database tables...

9.4AI score0.00675EPSS
Exploits0References1
OSV
OSV
added 2023/04/25 7:15 p.m.2 views

DEBIAN-CVE-2021-44476

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files...

6.8CVSS7AI score0.00481EPSS
Exploits0References1
OSV
OSV
added 2023/04/25 7:15 p.m.6 views

CVE-2021-44476

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files...

6.8CVSS8.2AI score
Exploits0References2
NVD
NVD
added 2023/04/25 7:15 p.m.15 views

CVE-2021-44476

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files...

7.1CVSS6.6AI score0.00481EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/04/25 7:15 p.m.23 views

CVE-2021-44476

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files...

7.1CVSS6.9AI score0.00481EPSS
Exploits0References2
OSV
OSV
added 2023/04/25 7:15 p.m.1 views

UBUNTU-CVE-2021-44476

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files...

7.1CVSS7.3AI score0.00481EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2023/04/25 6:33 p.m.32 views

CVE-2021-44476

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files...

7.1CVSS6.6AI score0.00481EPSS
Exploits0
CVE
CVE
added 2023/04/25 6:33 p.m.57 views

CVE-2021-44476

CVE-2021-44476 affects Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, via a sandboxing issue that allows authenticated administrators to read local files on the server, including sensitive configuration files. The connected documents corroborate the same description and lis...

7.1CVSS6.4AI score0.00481EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/25 6:33 p.m.24 views

CVE-2021-44476

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files...

7.1CVSS6.8AI score0.00481EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/04/24 12:0 a.m.4 views

Expo 安全漏洞

Expo is an open source platform from Expo for creating React Native apps, which provides a number of tools and services that make it easier to develop React Native apps. Expo has a security vulnerability. An attacker exploited the vulnerability to take over an account and steal configuration file...

9.6CVSS8.7AI score0.23165EPSS
Exploits0References3
Rows per page
Query Builder