CVE-2020-18912

An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php...

CVE-2020-18912

CVE-2020-18912 affects Earcms Ear App v.20181124. A vulnerability allows a remote attacker to execute arbitrary code via the endpoint uload/index-uplog.php, as reported across multiple sources (NVD entry). The root cause details are not fully elaborated in the provided documents, but the impact i...

CVE-2020-18912: Unrestricted Upload of File with Dangerous Type

An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php...

org.apache.maven.plugins:maven-ear-plugin (2.10.1) potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.10.3)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-ear-plugin 2.10.1 Source cves: CVE-2023-37460 Source...

com.google.code.tycho-eclipserun-plugin:tycho-eclipserun-plugin (0.13.0), com.googlecode.maven-download-plugin:maven-download-plugin (>=1.0.0, <=1.1.0) +75 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.2)

org.codehaus.plexus:plexus-archiver MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.code.tycho-eclipserun-plugin:tycho-eclipserun-plugin 0.13.0 -...

com.sun.enterprise:hk2-maven (>=0.2, <=1.6.9), com.sun.enterprise:hk2-maven-plugin (>=0.2, <=1.6.9) +27 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-4)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.sun.enterprise:hk2-maven =0.2, =0.2, =0.0.1, =1.46, =3.2, =3.2, =3.2, =1.0-rc4,...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Netcool Configuration Manager (CVE-2018-1793)

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Netcool Configuration Manager version 6.4.1; IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2018-1793)

Summary WebSphere Application Server is shipped with IBM Tivoli System Automation Application Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Recovering Smartphone Voice from the Accelerometer

Yet another smartphone side-channel attack: "EarSpy: Spying Caller Speech and Identity through Tiny Vibrations of Smartphone Ear Speakers": Abstract: Eavesdropping from the users smartphone is a well-known threat to the users safety and privacy. Existing studies show that loudspeaker reverberatio...

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2018-1793)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow, IBM Business Process Manager, and IBM Business Process Manager Enterprise Service Bus. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been...

org.apache.maven.plugins:maven-ear-plugin (2.10.1) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10.3)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-ear-plugin 2.10.1 Source cves: CVE-2018-1002200 Source...

com.facebook.presto:presto-cassandra (>=0.146, <=0.166), com.stratio.cassandra:cassandra-lucene-index-plugin (2.1.6.2) +5 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.1.6)

org.apache.cassandra:cassandra-all MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.facebook.presto:presto-cassandra =0.146, =0.1.0.final, =0.1.0.final, =0.4.0.final,...

Code Execution Vulnerability in Ear Distribution Frontend

Ear Distribution is a content management system. A code execution vulnerability exists in the frontend of Ear Distribution. An attacker could gain server privileges by constructing malicious code...

Sql injection

H3C H3Cloud OS all versions allows SQL injection via the ear/gridevent sidx parameter...

CVE-2019-12193

H3C H3Cloud OS all versions allows SQL injection via the ear/gridevent sidx parameter...

CVE-2019-12193: Improper Neutralization of Special Elements used in an SQL Command

H3C H3Cloud OS all versions allows SQL injection via the ear/gridevent sidx parameter...

PT-2019-12690

Name of the Vulnerable Software and Affected Versions H3C H3Cloud OS affected versions not specified Description The issue allows SQL injection via the ear/grid event API endpoint, specifically through the sidx parameter. Recommendations At the moment, there is no information about a newer versio...

Security Bulletin: Cross-site scripting vulnerability in SAML ear in WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1793)

Summary There is a potential cross-site scripting vulnerability in SAML ear in WebSphere Application Server. Vulnerability Details CVEID: CVE-2018-1793 DESCRIPTION: IBM WebSphere Application Server using SAML ear is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Security Bulletin: Cross-site scripting vulnerability in SAML ear in WebSphere Application Server shipped with Tivoli Integrated Portal (CVE-2018-1793)

Summary There is a potential Cross-site scripting vulnerability in SAML ear in WebSphere Application Server shipped with Tivoli Integrated Portal Vulnerability Details CVEID: CVE-2018-1793 DESCRIPTION: IBM WebSphere Application Server using SAML ear is vulnerable to cross-site scripting. This...

Security Bulletin: Cross-site scripting vulnerability in OAuth ear in WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1794)

Summary There is a potential cross-site scripting vulnerability in the OAuth ear in WebSphere Application Server shipped with Jazz for Service Management . Vulnerability Details CVEID: CVE-2018-1794 DESCRIPTION: IBM WebSphere Application Server using OAuth ear is vulnerable to cross-site scriptin...