CVE-2020-204480

CVE-2020-204480 is a Server-side Request Forgery (SSRF) vulnerability affecting IBM WebSphere Application Server when shipped with IBM Security Identity Manager (ISIM). Affected product: ISIM 6.0.0 with WAS 7.0 and 8.5. Remediation/fixes are described in IBM security bulletins; no workarounds are...

CVE-2020-20440

IBM Security Bulletin indicates CVE-2020-20440 is a server-side request forgery vulnerability in IBM WebSphere Application Server when shipped with IBM Security Identity Manager (ISIM). Affected products: ISIM 6.0.0; WebSphere Application Server versions 7.0 and 8.5. Remediation: ISIM 6.0.0 with ...

CVE-2020-29754

CVE-2020-29754 is a privilege escalation vulnerability in IBM WebSphere Application Server shipped with IBM Security Identity Manager (ISIM). Affected ISIM versions: 6.0.0 and 6.0.2. Affected WAS versions: WAS 7.0 and 8.5 for ISIM 6.0.0; WAS 9 for ISIM 6.0.2. Remediation/fixes are listed in the b...

CVE-2019-4643

Technical details for CVE-2019-4643 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-4575

CVE-2021-4575 is a cross-site scripting vulnerability affecting IBM WebSphere Application Server (WAS) ND traditional, as referenced in IBM security bulletins about WAS shipped with IBM Security Directory Server. The connected IBM bulletin indicates affected WAS 8.5 and references the remediation...

CVE-2011-4065

Technical details for CVE-2011-4065 are not provided in the connected documents. The Initial Description indicates reservation with no public details. Monitor for updates.

CVE-2011-0068

CVE-2011-0068: The connected documentation details memory safety issues in Firefox’s WebGL/WebGLES components that could be exploited to run arbitrary code. Mozilla’s MFSA 2011-17 describes two crashes in WebGL/WebGLES that could be triggered to execute code, fixed in Firefox 4.0.1. OpenSUSE advi...

CVE-2108-6150

The connected Gentoo GLSA (GLSA-201808-01) confirms multiple vulnerabilities in Chromium and Google Chrome. A remote attacker could escalate privileges, trigger a heap buffer overflow, obtain sensitive information, or spoof a URL. The advisory provides remediation by upgrading to Chromium >= 6...

CVE-2020-19599

CVE-2020-19599 is covered within a Gentoo advisories set on Binutils: Multiple vulnerabilities. The connected Gentoo GLSA-202107-24 references CVE-2020-19599 among other CVEs and notes multipleBinutils vulnerabilities with no workaround availability. The Gentoo advisory recommends upgrading Binut...

CVE-2021-43656

CVE-2021-43656 is listed among multiple Thunderbird vulnerabilities in Ubuntu USN advisories USN-5246-1 / USN-5248-1. The Connected documents confirm Thunderbird is affected, but they do not provide any specific details about the root cause, impacted component/version, exact impact, exploit statu...

CVE-2020-9709

CVE-2020-9709 is referenced in APSB20-45 as a security bypass that could lead to privilege escalation in Adobe Photoshop CC 2019/2020. The connected Nessus entries indicate affected products are Photoshop on Windows and macOS prior to 20.0.10/21.2.1, with the advisory describing multiple vulnerab...

CVE-2021-28582

Adobe Photoshop is affected by a buffer overflow vulnerability (CVE-2021-28582) described in APSB21-38. The issue is reported to allow arbitrary code execution and is tied to Photoshop versions prior to 21.2.9/22.4.2 on Windows and macOS. Connected sources indicate a vulnerability in Photoshop (C...

CVE-2021-44184

Adobe Photoshop (Windows/macOS) versions 22.x prior to 22.5.4 and 23.x prior to 23.1 are affected by multiple vulnerabilities referenced in APSB21-113, including a buffer overflow (CVE-2021-44184) that can lead to arbitrary code execution. The issue stems from an out-of-bounds write (CVE-2021-430...

CVE-2021-43020

CVE-2021-43020 is discussed in connected advisories for Adobe Photoshop (APSB21-113). The vulnerability is described as an out-of-bounds/End-of-buffer issue that can lead to a memory leak through an access-after-end-of-buffer condition (CWE-788). Affected products include Photoshop on Windows and...

CVE-2021-427171

The connected CNNVD entry links CVE-2021-427171 to a vulnerability in ModSecurity used with NGINX, where the ModSecurity JSON parser can be triggered by specially formatted JSON messages, causing high resource utilization and a potential denial of service. Affected component: ModSecurity WAF inte...

CVE-2021-442255

CVE-2021-442255 is referenced in a Huawei EulerOS keepalived advisory (EulerOS-SA-2022-2565) affecting EulerOS Virtualization 3.0.6.0, where the keepalived component relies on IPVS for Layer4 load balancing. The connected OpenVAS/Nessus entries confirm the vulnerability association and assign a C...

CVE-2020-1867

Technical details for CVE-2020-1867 are not publicly available in the provided documents. The connected sources do not specify affected products, versions, or impact. Monitor for updates as more information is released.

CVE-2099-1234

Technical details for CVE-2099-1234 are not publicly available in the provided documents. Monitor for updates; no affected products, vectors, or remediation information can be stated at this time.

CVE-2021-9951

This CVE (CVE-2021-9951) is addressed in OpenSUSE/SUSE security updates for webkit2gtk3. Affected component: WebKitGTK’s webkit2gtk3, updated to version 2.30.3. Root cause: a use-after-free in the relevant code path. Impact: could allow arbitrary code execution on vulnerable hosts. Remediation: a...

CVE-2016-11107

CVE-2016-11107 in this dataset is a placeholder; connected documents reveal the related concrete issue CVE-2017-11107 affecting phpldapadmin (Debian Jessie). It is a cross-site scripting (XSS) vulnerability in phpldapadmin that was fixed in Debian 8 (Jessie) with version 1.2.2-5.2+deb8u1. The Deb...