CVE-2021-39068

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

ImageMagick memory leak vulnerability (CNVD-2021-49050)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in AcquireSemaphoreMemory in semaphore.c and AcquireMagickMemory in memory.c in ImageMagick version 7.0.11-14. No details of the...

IBM Curam Social Program Management Cross-Site Request Forgery Vulnerability (CNVD-2021-01275)

IBM Curam Social Program Management is a suite of social program management solutions from IBM in the United States that support the end-to-end social program delivery process. A cross-site request forgery vulnerability exists in IBM Curam Social Program Management 7.0.9, 7.0.11. An attacker coul...