EUVD-2020-26027

Malware in sbrugna...

EUVD-2020-26026

Malware in sbrugna...

EUVD-2020-26021

Malware in sbrugna...

EUVD-2017-10122

Malware in sbrugna...

EUVD-2016-10763

Malware in sbrugna...

EUVD-2018-12250

Malware in sbrugna...

EUVD-2020-26022

Malware in sbrugna...

EUVD-2022-27463

Malicious code in bioql PyPI...

CVE-2022-22318: Insufficient Session Expiration

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

PT-2022-15356

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 8.0.0 through 8.0.1 Description The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. Recommendations For versions 8.0...

CVE-2022-22317: Insufficient Session Expiration

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281...

IBM Curam Social Program Management 代码问题漏洞

IBM Curam Social Program Management is an IBM business and technology solution that provides pre-built health and social program components, business processes, toolsets and interfaces on top of a dynamically configurable architecture. The vulnerability stems from the failure of the program to...

PT-2022-15357

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 8.0.0 through 8.0.1 Description The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. Recommendations For versions 8.0...

CVE-2021-39068

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

PT-2022-10871

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 7.0.11 through 8.0.1 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within...

CVE-2021-39068: Improper Neutralization of Input During Web Page Generation

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2021-39068

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2020-4942: Cross-Site Request Forgery (CSRF)

IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942...

PT-2021-12245

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 7.0.9 through 7.0.11 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery...

CVE-2020-4778

IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...