EUVD-2020-26022

Malware in sbrugna...

EUVD-2016-10763

Malware in sbrugna...

EUVD-2018-12250

Malware in sbrugna...

EUVD-2017-10122

Malware in sbrugna...

EUVD-2020-26021

Malware in sbrugna...

EUVD-2020-26026

Malware in sbrugna...

EUVD-2020-26027

Malware in sbrugna...

EUVD-2022-27463

Malicious code in bioql PyPI...

PT-2022-15357

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 8.0.0 through 8.0.1 Description The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. Recommendations For versions 8.0...

CVE-2022-22318: Insufficient Session Expiration

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

CVE-2022-22317: Insufficient Session Expiration

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281...

PT-2022-15356

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 8.0.0 through 8.0.1 Description The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. Recommendations For versions 8.0...

CVE-2021-39068: Improper Neutralization of Input During Web Page Generation

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

PT-2022-10871

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 7.0.11 through 8.0.1 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within...

PT-2021-12245

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 7.0.9 through 7.0.11 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery...

CVE-2020-4942: Cross-Site Request Forgery (CSRF)

IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942...

CVE-2020-4774

An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information su...

CVE-2020-4773

A cross-site request forgery CSRF vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted actions on the web application while they are currently authenticated. This applies to a single server class only, with no...

Xxe

An XML External Entity Injection XXE vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information, denial of service, server side request forgery or consume memory resources. IBM X-Force ID: 18915...

Input validation

An improper input validation before calling java readLine method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159...