CVE-2021-42950

Remote Code Execution RCE vulnerability exists in Zepl Notebooks all previous versions before October 25 2021. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new organization by which additional...

Remote code execution

Remote Code Execution RCE vulnerability exists in Zepl Notebooks all previous versions before October 25 2021. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new organization by which additional...

CVE-2021-42950

Remote Code Execution RCE vulnerability exists in Zepl Notebooks all previous versions before October 25 2021. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new organization by which additional...

Open OnDemand has an unspecified vulnerability

Osc Open OnDemand is an application of the Osc open source organization in the United States. Open OnDemand has a security vulnerability that could be exploited by an attacker to provide crafted input in job templates...

Zulip server has an unspecified vulnerability (CNVD-2022-15523)

Zulip server is an open source team chat application from Zulip USA. zulip server has a security vulnerability that stems from the fact that zlip Server deployments that reside in multiple organizations are vulnerable to attacks where an invitation created in one organization possibly a role with...

gaseo.us Cross Site Scripting vulnerability OBB-2384743

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-1005-1759

The provided connected Ubuntu advisory (USN-171-1) details multiple PHP4-related issues tied to CVE-1005-1759. The php4-dev package ships shtool in /usr/lib/php4/build/, where shtool created temporary files insecurely, enabling a local symlink attack to write arbitrary files with the invoking use...

Open OnDemand 安全漏洞

Osc Open OnDemand is an application of the Osc open source organization in the United States. Open OnDemand has a security vulnerability that could be exploited by an attacker to provide crafted input in job templates...

CVE-2019-4313

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 is affected by CVE-2019-4313, which describes using a salt-less one-way hash for inputs (e.g., passwords) that should be salted, potentially exposing sensitive information. Remediation is to upgrade to the fixed 4.1.0 installer (rhel7.x IBM...

CVE-2017-1094

CVE-2017-1094 affects IBM Jazz Reporting Service (JRS) Lifecycle Query Engine (LQE). The IBM Security Bulletin confirms an HTML injection vulnerability in JRS, exploitable via remote HTML injection that would execute in the browser within the hosting site’s context. Affected product versions are ...

CVE-2021-33517

CVE-2021-33517 and CVE-2021-36090 are vulnerabilities in Apache Commons Compress that affect IBM WebSphere Liberty (and WebSphere Liberty-based bundles) used in IBM Cloud Pak for Applications and IBM WebSphere Application Server families. The issues cause denial of service through memory-related ...

CVE-2018-1687

IBM API Connect is vulnerable to a denial-of-service (CVE-2018-1687) due to a lack of rate limiting in the TCP listener. A remote attacker could launch a TCP SYN flood to exhaust CPU and memory. Affected: IBM API Connect versions 5.0.0.0–5.0.8.3. Remediation: upgrade to IBM API Connect Developer ...

CVE-2019-4223

IBM OpenPages GRC Platform is affected by an information-disclosure vulnerability tracked as CVE-2019-4223. The issue affects IBM OpenPages GRC Platform version 8.0 and allows disclosure of detailed error messages in WebApplication and API responses. Remediation provided by IBM fixes are availabl...

CVE-2019-4438

IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) is affected by CVE-2019-4438. The issue arises because Db2 does not enforce required authorization for certain commands when AUTO_REVAL is set to DEFERRED_FORCE, potentially exposing information to connected users. Affected: all f...

CVE-2017-1213

CVE-2017-1213 is cited in IBM BigInsights security bulletin as a Denial-of-Service flaw in Open Source Zookeeper affecting IBM BigInsights (IBM Open Platform with Apache Hadoop). The vulnerability could be exploited by an authenticated user when Jetty AdminServer is not available, and access is b...

CVE-2017-1123

CVE-2017-1123 is an escal ation of privilege in the IBM DS8000 Hardware Management Console (HMC) service interface. The IBM bulletin lists affected models (DS8880/DS8870/DS8800) and indicates affected code levels where exposure exists; a patch set CVE_1Q2018_v1.0 is available to remediate all lis...

CVE-2012-3339

CVE-2012-3339 is an XML External Entity (XXE) vulnerability in IBM InfoSphere Guardium. The issue allows remote authenticated users to obtain sensitive information, specifically via an error report that can reveal server file contents (including a database password). Affected platforms include IB...

CVE-2019-4042

IBM Sterling B2B Integrator is affected by CVE-2019-4042 through a permission-control vulnerability that could allow a user without proper permissions to access EBICS configuration using their own secure token. Affected versions are IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0. Remediation...

CVE-2020-4333

CVE-2020-4333 affects IBM WebSphere eXtreme Scale Liberty Deployment. The vulnerability is cross-site scripting caused by insufficient validation of client data in the Web UI, allowing an attacker to inject JavaScript to steal credentials within a trusted session. Affected product/version: WebSph...

CVE-2020-4331

IBM WebSphere eXtreme Scale Liberty Deployment is affected by a cross-site scripting vulnerability (CVE-2020-4331) in the Web UI, allowing arbitrary JavaScript to be embedded and potentially exposing credentials in a trusted session. Affected versions include WebSphere eXtreme Scale Liberty 8.6.1...