Top Five Patch Management & Process Best Practices

Explore the top patch management best practices to mitigate the growing threat of vulnerability exploits in your organization...

iccrem.com Cross Site Scripting vulnerability OBB-2848298

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

编号已被CVE保留

No details are available at this time...

indowpcbc.org Cross Site Scripting vulnerability OBB-2839955

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-35489

In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are assigned...

PT-2022-22865 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad version 5.2.0 Description: The issue allows customers with secondary organizations assigned to view all organizations in the system, rather than only those they are assigned to. Recommendations: For Zammad version 5.2.0, at the moment,...

Zammad 安全漏洞

Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in Zammad version 5.2.0 that stems from the ability of a user assigned to a secondary organization to see the entire organization instead of just the organization to which they are...

CVE-2022-2539

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization...

CVE-2022-2539

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization...

Information disclosure

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization...

CVE-2022-2539

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization...

UBUNTU-CVE-2022-2539

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization...

CVE-2022-2539

Removed by vendor...

CVE-2022-2539

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization...

PT-2022-17255 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.6 through 15.0.4 GitLab CE/EE versions 15.1 through 15.1.3 GitLab CE/EE versions 15.2 through 15.2.0 Description: An issue in GitLab CE/EE allowed a project member to filter issues by contact and organization...

CVE-2019-4519

CVE-2019-4519 is addressed in multiple IBM Financial Transaction Manager products. The connected IBM security bulletins indicate a validation vulnerability where input is not properly validated, potentially allowing an authenticated user to prevent audit log entries. Affected products and version...

CVE-2019-4517

IBM has published multiple advisories for CVE-2019-4517 across its Financial Transaction Manager (FTM) family. The vulnerability is described as a remote open-redirect/phishing vector that can spoof URLs to redirect users to malicious sites. Affected products/versions include: FTM ACH v3.0.6.0–3....

CVE-2019-4529

IBM Sterling Connect:Direct for UNIX is vulnerable to privilege escalation via a malicious getuid() replacement in the C/C++ API. Affected: UNIX versions 6.0.0, 4.3.0, and 4.2.0. An authenticated user with limited Connect:Direct privileges can exploit a custom application to gain unauthorized acc...

CVE-2020-4637

IBM Resilient App Host (Beta) in Resilient OnPrem IBM Security SOAR was found to use weaker-than-expected cryptographic algorithms, which could allow decryption of highly sensitive information. This is documented under CVE-2020-4637 in IBM’s security bulletin, which identifies the affected produc...

CVE-2020-4443

IBM OpenPages with Watson is affected by CVE-2020-4443 (XSS). The vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected product/version: IBM OpenPages with Watson v8.1. Remediation: apply 8.1 Interim Fix...