CVE-2021-25836

Cosmos Network Ethermint

PT-2021-16812

Name of the Vulnerable Software and Affected Versions Cosmos Network Ethermint versions = 0.4.0 Description The issue is related to cache lifecycle inconsistency in the EVM module. This inconsistency occurs between the Storage caching cycle and the Tx processing cycle, causing Storage changes fro...

CVE-2021-25836: Undefined Security Weakness

Cosmos Network Ethermint = v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memorystateObject.code and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contrac...

CVE-2021-25837: Undefined Security Weakness

Cosmos Network Ethermint = v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage changes caused by a failed transaction are improperly reserved in memory. Although the bad storage cach...

PT-2021-16811

Name of the Vulnerable Software and Affected Versions Cosmos Network Ethermint versions = 0.4.0 Description The issue concerns a cache lifecycle inconsistency in the EVM module. Specifically, when a transaction fails, the bytecode associated with it remains in memory, stored in stateObject.code,...

IBM API Connect Cross-Site Request Forgery Vulnerability (CNVD-2021-09301)

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing and securing APIs, microservices and more. IBM API Connect suffers from a cross-site request forgery vulnerability, which arises from a WEB...

IBM Security Identity Governance and Intelligence Security Breach

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment, and identity management. A security vulnerability exists in IBM Security Identity...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2020-4782)

Summary WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in t...

Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities in IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineering Insights EN...

IBM Security Identity Governance Authentication Vulnerability

IBM Security Identity Governance and Intelligence IGI is a suite of identity management and governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. An authentication vulnerability exists in IBM...

Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt

Summary Multiple Oracle Database Server security vulnerabilities affect IBM Emptoris Supplier Lifecycle Mgmt. Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an authenticated...

CVE-2021-22498

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...

CVE-2021-22498

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...

CVE-2021-22498

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...

CVE-2021-22498

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...

CVE-2021-22498

CVE-2021-22498 is an XML External Entity Injection vulnerability affecting Micro Focus Application Lifecycle Management (formerly Quality Center). The issue impacts versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier, and 15.5. The provided connected documents confirm the vulnera...

PT-2021-15107

Name of the Vulnerable Software and Affected Versions Micro Focus Application Lifecycle Management versions 12.x through 15.5 Micro Focus Application Lifecycle Management versions 12.60 Patch 5 and earlier Micro Focus Application Lifecycle Management versions 15.0.1 Patch 2 and earlier Descriptio...

Micro Focus Application Lifecycle Management Code Issue Vulnerability

Micro Focus Application Lifecycle Management is a unified platform for managing and automating activities, insights, and assets for the delivery of requirements-based applications through development, testing, and Agile delivery from Micro Focus, UK. A code issue vulnerability exists in Micro Foc...

Cloudbees Jenkins Bumblebee HP ALM Plugin Information Disclosure Vulnerability

Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Bumblebee HP ALM Plugin is us...

CVE-2021-22498: Improper Restriction of XML External Entity Reference

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...