152 matches found
CVE-2023-50328
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force ID: 275110...
CVE-2023-50935
IBM PowerSC 1.3, 2.0, and 2.1 fails to properly restrict access to a URL or resource, which may allow a remote attacker to obtain unauthorized access to application functionality and/or resources. IBM X-Force ID: 275115...
CVE-2023-50962
IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" HSTS web security policy mechanism. IBM X-Force ID: 276004...
CVE-2023-50940
IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 275130...
CVE-2023-50939
IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 275129...
CVE-2023-50936
IBM PowerSC 1.3, 2.0, and 2.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 275116...
CVE-2023-50941
IBM PowerSC 1.3, 2.0, and 2.1 does not provide logout functionality, which could allow an authenticated user to gain access to an unauthorized user using session fixation. IBM X-Force ID: 275131...
EUVD-2023-55665
Malicious code in bioql PyPI...
EUVD-2023-55133
Malicious code in bioql PyPI...
EUVD-2023-55132
Malicious code in bioql PyPI...
EUVD-2023-55664
Malicious code in bioql PyPI...
EUVD-2023-55669
Malicious code in bioql PyPI...
EUVD-2023-55667
Malicious code in bioql PyPI...
EUVD-2023-55691
Malicious code in bioql PyPI...
EUVD-2023-55666
Malicious code in bioql PyPI...
EUVD-2023-55668
Malicious code in bioql PyPI...
EUVD-2023-55672
Malicious code in bioql PyPI...
EUVD-2023-55671
Malicious code in bioql PyPI...
EUVD-2023-55670
Malicious code in bioql PyPI...
CVE-2023-50326
IBM PowerSC 1.3, 2.0, and 2.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 275107...