Lucene search
+L

21276 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/05/08 3:19 p.m.13 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to idna-0.1.5.crate, idna-0.5.0.crate CVE-2024-12224

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to idna-0.1.5.crate, idna-0.5.0.crate CVE-2024-12224. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-12224 DESCRIPTION: idna 0.5.0 and earlier accepts Punycode...

8.8CVSS7.2AI score0.00221EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/08 3:16 p.m.23 views

CVE-2025-2898

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control RBAC configurations...

8.8CVSS6.7AI score0.00328EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2025/05/08 12:35 p.m.66 views

USN-7504-1: LibreOffice vulnerability

Juraj Šarinay discovered that LibreOffice incorrectly handled verifying PDF signatures. A remote attacker could possibly use this issue to generate PDF files that appear to have a valid signature...

5.5CVSS5.2AI score0.00112EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/05/08 12:00 a.m.13 views

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is Dell's hybrid cloud security management solution for thin client devices, designed to simplify IT management and enhance security. An authentication bypass vulnerability exists in Wyse Management Suite, which could be exploited by an attacker to cause an information...

4.9CVSS6.7AI score0.00697EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/08 12:00 a.m.16 views

PT-2025-20410 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.1 Description: The issue is an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this, leading to Information Disclosure...

4.9CVSS6.2AI score0.00697EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 2025/05/07 7:11 p.m.7 views

libreoffice security update

An update is available for libreoffice. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LibreOffice is an open source, community-developed office productivity...

7.8CVSS6.8AI score0.00238EPSS
SaveExploits0
OSV
OSV
added 2025/05/07 7:11 p.m.9 views

RLSA-2024:4242 Moderate: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

7.3CVSS7AI score0.01008EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/05/07 8:30 a.m.132 views

Exploit for CVE-2025-51052

Vulnerabilities Discoverers & Exploit Authors Davide Reggiani...

8.6CVSS6.5AI score0.00521EPSS
SaveExploits8
OSV
OSV
added 2025/05/06 3:16 p.m.14 views

CVE-2025-2898

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control RBAC configurations...

8.8CVSS5.8AI score0.00328EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/06 3:16 p.m.29 views

CVE-2025-2898

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control RBAC configurations...

8.8CVSS0.00328EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/06 2:41 p.m.38 views

CVE-2025-2898 IBM Maximo Application Suite privilege escalation

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control RBAC configurations...

7.5CVSS0.00328EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/06 2:41 p.m.16 views

CVE-2025-2898 IBM Maximo Application Suite privilege escalation

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control RBAC configurations...

7.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/06 2:41 p.m.77 views

CVE-2025-2898

IBM Maximo Application Suite 9.0 contains an elevation-of-privilege vulnerability arising from misconfigured RBAC permissions in the Role-Based Access Control settings. The issue affects the Location Service for Esri Component (9.0) and can be exploited by an attacker with some level of access to...

8.8CVSS7.4AI score0.00328EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/06 10:17 a.m.19 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to dompurify-3.2.3.tgz CVE-2025-26791

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to dompurify-3.2.3.tgz CVE-2025-26791. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-26791 DESCRIPTION: DOMPurify before 3.2.4 has an incorrect template literal...

6.1CVSS6.4AI score0.00605EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2025/05/06 12:00 a.m.10 views

IBM Maximo Application Suite 安全漏洞

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. An elevation of privilege vulnerability exists in IBM Maximo Application Suite, which stems from...

8.8CVSS6.6AI score0.00328EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/05/06 12:00 a.m.20 views

PT-2025-19898 · Ibm · Ibm Maximo Application Suite

Name of the Vulnerable Software and Affected Versions: IBM Maximo Application Suite version 9.0 Description: The issue is related to a security configuration vulnerability in Role-Based Access Control RBAC configurations, which could allow an attacker with some level of access to elevate their...

8.8CVSS6AI score0.00328EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.10 views

The vulnerability of the Orders component in the Oracle Configurator application of the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the Orders component in the Oracle Configurator application of the Oracle E-Business Suite is related to insufficient validation of entered data. Exploiting this vulnerability may allow an attacker to gain access to read, modify, add, or delete data...

6.4CVSS7.1AI score0.00267EPSS
SaveExploits0References2Affected Software2
GithubExploit
GithubExploit
added 2025/04/30 6:34 a.m.327 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 Burp Suite Extension Overview This Python-b...

10CVSS10AI score0.99512EPSS
SaveExploits19
CNVD
CNVD
added 2025/04/25 12:00 a.m.16 views

Information Disclosure Vulnerability in Oracle E-Business Suite

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An information disclosure vulnerability exists in Oracle User Management for Oracle E-Business Suite, which arises from a flaw in the search and register users component and can be exploited by a...

7.5CVSS6.2AI score0.00673EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/21 12:00 a.m.8 views

Wyse Management Suite Cross-Site Scripting Vulnerability

The Wyse Management Suite is a cloud and local management platform from Dell, USA. A cross-site scripting vulnerability exists in Wyse Management Suite that stems from improper input neutralization and can be exploited by an attacker to cause script injection...

4.9CVSS6.6AI score0.00246EPSS
SaveExploits0References1
Rows per page
Query Builder