CVE-2023-28522

CVE-2023-28522 affects IBM API Connect V10 and is an improper access control vulnerability that could allow an authenticated user to perform actions they should not have access to. The IBM Security Bulletin (and related entries) confirm the issue in API Connect V10.x and provide remediation paths...

CVE-2023-28522 IBM API Connect improper access control

IBM API Connect V10 could allow an authenticated user to perform actions that they should not have access to. IBM X-Force ID: 250585...

PT-2023-23593 · Unknown · Vert.X Stomp

Name of the Vulnerable Software and Affected Versions: Vert.x STOMP versions 3.1.0 through 3.9.16 Vert.x STOMP versions 4.0.0 through 4.4.2 Description: The Vert.x STOMP server processes client STOMP frames without checking that the client sent an initial CONNECT frame replied with a successful...

PT-2023-21775 · Ibm · Ibm Api Connect

Name of the Vulnerable Software and Affected Versions: IBM API Connect V10 Description: The issue allows an authenticated user to perform actions that they should not have access to. Recommendations: For IBM API Connect V10, at the moment, there is no information about a newer version that contai...

IBM API Connect 安全漏洞

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from International Business Machines IBM. The product supports creating, running, managing, and securing APIs, microservices, and more. A security vulnerability exists in IBM API Connect version V10 that...

CISA Releases Fifteen Industrial Control Systems Advisories

CISA released fifteen Industrial Control Systems ICS advisories on May 11, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-131-01 Siemens Solid Edge ICSA-23-131-02 Siemens SCALANCE W1750D ICSA-23-131-03 Siemen...

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41769

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41769

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

Improper access control

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41769

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41769

CVE-2022-41769 concerns the Intel® Connect M Android application prior to version 1.82, where an authenticated user may trigger an escalation of privilege via local access due to an improper access control vulnerability. The issue affects the application when installed on affected devices and can...

CVE-2022-41769

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41801

Intel® Connect M Android application prior to version 1.82 is affected by CVE-2022-41801, described as uncontrolled resource consumption that could allow an authenticated user to cause denial of service via local access. Affected product: Intel Connect M Android app before 1.82. Root cause: uncon...

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

Intel Connect M Android application 资源管理错误漏洞

Intel Connect M Android application is an application from Intel Corporation USA. A security vulnerability exists in the Intel Connect M Android application prior to version 1.82, which arises from uncontrolled resource consumption and could allow an authenticated user to potentially enable denia...

Siemens SIMATIC Cloud Connect 7 Path Traversal Vulnerability

SIMATIC Cloud Connect 7 is an IoT gateway for connecting programmable logic controllers to cloud services and allows field devices with OPC UA server interfaces to be connected as OPC UA clients. A path traversal vulnerability exists in Siemens SIMATIC Cloud Connect 7, which can be exploited by a...