IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customizable UI, report management and streamlined audit process building.IBM Security Guardium Key Lifecycle Manager is...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-2380)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2380 advisory. - The Linux kernel was found vulnerable out of bounds memory access in the...

CVE-2023-21453

Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data...

CVE-2023-21449

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...

CVE-2023-21449

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...

CVE-2023-21453

Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data...

Input validation

Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data...

Improper access control

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...

CVE-2023-27084

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

Design/Logic Flaw

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

PT-2023-18221 · Unknown · Softsim Ta

Name of the Vulnerable Software and Affected Versions: SoftSim TA versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper input validation, which allows local attackers to access protected data. Recommendations: For versions prior to SMR Mar-2023 Release 1, update t...

CVE-2023-21449

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...

CVE-2023-27084

CVE-2023-27084 concerns a permissions issue in isoftforce Dreamer CMS v4.0.1 that lets a local attacker access sensitive data via the AttachmentController parameter. The vulnerability is described as a local-attack, high confidentiality impact with medium overall CVSS (5.3) and no user interactio...

CVE-2023-27084

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

CVE-2023-21449

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...

CVE-2023-21453

Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data...

CVE-2023-21453

Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data...

CVE-2023-21453

The CVE-2023-21453 issue affects SoftSim TA prior to SMR Mar-2023 Release 1. Root cause: improper input validation in SoftSim TA, enabling local attackers to access protected data. Affected component: SoftSim TA (pre-Release 1). Impact: unauthorized data access with local attack vector; publicati...

PT-2023-20942 · Isoftforce · Isoftforce Dreamer Cms

Name of the Vulnerable Software and Affected Versions: isoftforce Dreamer CMS version 4.0.1 Description: A permissions issue allows local attackers to obtain sensitive information via the AttachmentController parameter. This issue can be exploited to gain access to restricted data. Recommendation...

CVE-2023-26912

Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...