Security Bulletin: Stack overflow via TIS_CODESET environment variable in IBM Workload Scheduler

Summary Stack overflow via TISCODESET environment variable in IBM Workload Scheduler chkhltst program on Linux, Unix. Vulnerability Details CVEID: CVE-2021-20349 DESCRIPTION: IBM Tivoli Workload Scheduler is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local...

Vulnerabilities fixed in IBM Workload Scheduler

IBM has fixed vulnerabilities in Workload Scheduler. The vulnerabilities allow an unauthenticated malicious person to opportunity to cause a denial-of-service and to bypass a security measure. IBM categorizes these vulnerabilities using the CVSSv3 method with a highest score of 7.5. IBM has...

Security Bulletin: Vulnerability in IBM® SDK Java™ Technology Edition, Version 7, Version 8, that is used by IBM Workload Scheduler.

Summary Vulnerability in IBM® SDK Java™ Technology Edition, Version 7, Version 8, that is used by IBM Workload Scheduler. This issue was disclosed as part of the Oracle October 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Jav...

Security Bulletin: Vulnerability in IBM® SDK Java™ Technology Edition, Version 7, Version 8, that is used by IBM Workload Scheduler.

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7, Version 8, that is used by IBM Workload Scheduler. These issues were disclosed in the Oracle October 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-14792 DESCRIPTION: An unspecified vulnerability in Java S...

IBM Tivoli Workload Scheduler 缓冲区错误漏洞

IBM Tivoli Workload Scheduler is a suite of enterprise task scheduling software from IBM in the United States. The software supports planning, execution, and tracking of jobs across multiple platforms and environments. A security vulnerability exists in IBM Tivoli Workload Scheduler that results...

Security Bulletin: Vulnerability in IBM® SDK Java™ Technology Edition, Version 7, Version 8, that is used by IBM Workload Scheduler.

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7, Version 8, that is used by IBM Workload Scheduler. This issue was disclosed as part of the Oracle October 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An unspecified vulnerability in...

Security Bulletin: Vulnerability in IBM® SDK Java™ Technology Edition, Version 7, Version 8, that is used by IBM Workload Scheduler.

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7, Version 8, that is used by IBM Workload Scheduler. This issue was disclosed as part of the Oracle April 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-2773 DESCRIPTION: An unspecified vulnerability in Java...

CVE-2021-36622

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the...

CVE-2021-36622

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the...

CVE-2021-36622

The CVE-2021-36622 entry concerns Sourcecodester Online Covid Vaccination Scheduler System 1.0, which is affected by an Arbitrary File Upload vulnerability. The admin panel allows profile photo uploads at /scheduler/admin/?page=user, enabling an attacker to upload a file like shell.php with Conte...

GSD-2021-1001311 net: sched: fix memory leak in tcindex_partial_destroy_work

net: sched: fix memory leak in tcindexpartialdestroywork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.136 by commit...

Cybozu Garoon Scheduler and MultiReport Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to delete data from Scheduler and MultiReport without proper privileges...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2021-59740)

A cross-site scripting vulnerability exists in Scheduler in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1782 Cross-site scripting vulnerability in Scheduler CWE-79 - CVE-2021-20753 CyVDB-2029 Improper input validation vulnerability in Workflow CWE-20 - CVE-2021-20754 CyVDB-2071 Viewing restrictions...

Cybozu Garoon 安全漏洞

An operational restriction bypass vulnerability exists in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to delete data from Scheduler and MultiReport without proper privileges...

SourceCodester Online Covid Vaccination Scheduler System SQL Injection Vulnerability (CNVD-2021-99649)

SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. efficiently manages COVID-19 vaccinations through a reliable vaccine scheduling and queue management solution. SourceCodester Online Covid Vaccination Scheduler System is vulnerable to SQL...

CVE-2021-36621

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could...

SourceCodester Online Covid Vaccination Scheduler System SQL注入漏洞

SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. efficiently manages COVID-19 vaccinations through a reliable vaccine scheduling and queue management solution. SourceCodester Online Covid Vaccination Scheduler System is vulnerable to SQL...

CVE-2021-36621

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could...

Denial Of Service

Linux kernel is vulnerable to denial of service. Linux fair scheduler has a use-after-free in shownumastats because NUMA fault statistics are inappropriately freed. A flaw was found in the Linux kernels implementation of displaying NUMA statistics, where displaying the scheduler statistics could...