Security Bulletin: Open Redirect and Cross-Site Scripting Vulnerabilities in IMS Enterprise Suite Explorer for Development Help System

Abstract IMS™ Explorer for Development bundles the IBM® Eclipse Help System IEHS which has a security vulnerability. Content SUMMARY: IMS Explorer for Development bundles the IBM Eclipse Help System IEHS which has a security vulnerability. VULNERABILITYDETAILS: CVE ID: CVE-2012-2159 DESCRIPTION:...

Security Bulletin: IBM SPSS SamplePower vsview6 ActiveX Control vulnerabilities (CVE-2012-0189)

Abstract There are multiple security vulnerabilities with the VsVIEW6 ActiveX control shipped by IBM SPSS SamplePower Version 3. The vulnerabilities allow remote attackers to execute arbitrary code on installations of SamplePower when the control is invoked as ActiveX by Microsoft Internet...

CVE-2022-38573

10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function...

CVE-2022-38573

10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function...

CVE-2022-38573

10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function...

CVE-2022-38573

CVE-2022-38573 affects 10-Strike Network Inventory Explorer v9.3, where a buffer overflow is triggered via the Add Computers function. The issue has a CVSS v3.1 base score of 9.8 (CRITICAL), with network access, no privileges required, and no user interaction required. Impact is rated HIGH on con...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2022-21496, CVE-2022-21299)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21496...

Security Bulletin: Vulnerabilities in IBM WebSphere Application Server and WebSphere Application Server Liberty affect IBM Watson Explorer (CVE-2021-22476, CVE-2022-34165)

Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty is used by IBM Watson Explorer. IBM Watson Explorer has addressed the applicable CVE CVE-2021-22476, CVE-2022-34165. Vulnerability Details CVEID:CVE-2022-22476 DESCRIPTION: IBM WebSphere Application Server Liber...

PT-2022-24465 · 10 Strike · 10-Strike Network Inventory Explorer

Name of the Vulnerable Software and Affected Versions: 10-Strike Network Inventory Explorer version 9.3 Description: A buffer overflow issue was discovered in the Add Computers function of the software. Recommendations: For version 9.3, consider disabling the Add Computers function until a patch ...

10-Strike Network Inventory Explorer 安全漏洞

10-Strike Network Inventory Explorer is a scanning software from 10-Strike, Inc. for tracking hardware and software on networked computers. A security vulnerability exists in version v9.3 of 10-Strike Network Inventory Explorer that originates from a buffer overflow contained via the Add Computer...

Security Bulletin: Cross-Site Scripting vulnerability in IBM Business Automation Workflow (CVE-2018-1849)

Summary A Cross-Site Scripting vulnerability has been found in Business Process Choreographer BPC Explorer of IBM Business Automation Workflow. Vulnerability Details CVEID: CVE-2018-1849 DESCRIPTION: IBM Business Process Manager BPM is vulnerable to cross-site scripting. This vulnerability allows...

FE File Explorer 11.0.4 Local File Inclusion Exploit

Exploit Title: FE File Explorer 11.0.4 Local File inclusion Exploit Author: Chokri Hammedi Vendor Homepage: https://www.skyjos.com/ Software Link: https://apps.apple.com/us/app/fe-file-explorer-file-manager/id510282524 Version: 11.0.4 Tested on: iPhone ios 15.6 from ftplib import FTP import...

FE File Explorer 11.0.4 Local File Inclusion

Exploit Title: FE File Explorer 11.0.4 Local File inclusion Date: Sep 6, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: https://www.skyjos.com/ Software Link: https://apps.apple.com/us/app/fe-file-explorer-file-manager/id510282524 Version: 11.0.4 Tested on: iPhone ios 15.6 from ftplib impor...

August 26, 2022—KB5016688 (OS Builds 19042.1949, 19043.1949, and 19044.1949) Preview

None None...

August 25, 2022—KB5016691 (OS Build 22000.918) Preview

None None...

GHSA-2FVV-QXRQ-7JQ6 apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page

Impact The default landing page contained HTML to display a sample curl command which is made visible if the full landing page bundle could not be fetched from Apollo's CDN. The server's URL is directly interpolated into this command inside the browser from window.location.href. On some older...

IBM MQ 代码问题漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. It provides a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ that stems from an attacker being able to transfer malicious XML data to IBM MQ via the Explore...

Malicious Package

Overview iotex-explorer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious code in iotex-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2beba21703d9c694e1628b3b060a8950b6a7b55b45999d4f553dfa80a78f08c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3946 Malicious code in iotex-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2beba21703d9c694e1628b3b060a8950b6a7b55b45999d4f553dfa80a78f08c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...