2142 matches found
CVE-2022-34329: Exposure of Sensitive Information to an Unauthorized Actor
IBM CICS TX 11.7 could allow an attacker to obtain sensitive information from HTTP response headers. IBM X-Force ID: 229467...
CVE-2022-34312: Exposure of Sensitive Information to an Unauthorized Actor
IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...
CVE-2022-34317: Improper Neutralization of Input During Web Page Generation
IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459...
CVE-2022-34314: Exposure of Sensitive Information to an Unauthorized Actor
IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450...
IBM CICS TX 跨站脚本漏洞
IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM CICS TX version 11.1 that stems from vulnerability to cross-site scripting...
CVE-2022-34320: Use of a Broken or Risky Cryptographic Algorithm
IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229464...
CVE-2022-38705: Undefined Security Weakness
IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172...
PT-2022-24539
Name of the Vulnerable Software and Affected Versions IBM CICS TX versions 11.1 Standard and Advanced Description The issue is caused by a reverse tabnabbing flaw, allowing a remote attacker to bypass security restrictions. An attacker could exploit this and redirect a victim to a phishing site...
Design/Logic Flaw
Hyperledger Fabric 2.3 allows attackers to cause a denial of service orderer crash by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist...
CVE-2022-45196: Always-Incorrect Control Flow Implementation
Hyperledger Fabric 2.3 allows attackers to cause a denial of service orderer crash by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist...
CVE-2022-45196
Hyperledger Fabric 2.3 allows attackers to cause a denial of service orderer crash by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist...
PT-2025-43074
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the return type of the netiucv tx function. With the kernel control flow integrity kCFI enabled CONFIG CFI CLANG, indirect call targets are...
The vulnerability of the IBM CICS TX Advanced application server, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.
The vulnerability of the IBM CICS TX Advanced application server is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PT-2022-5293 · Ibm · Ibm Cics Tx Standard +1
Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard and Advanced version 11.1 Description: The issue is related to insufficient protection of service data, which could allow a remote attacker to gain unauthorized access to sensitive information. It is also noted that the...
PT-2022-5928 · Linux +6 · Linux Kernel +6
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A race condition vulnerability has been found in the Linux Kernel, specifically affecting the kcm tx work function in the net/kcm/kcmsock.c file. This issue is caused by synchronizatio...
GSD-2022-1006589 sfc: fix TX channel offset when using legacy interrupts
sfc: fix TX channel offset when using legacy interrupts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.146 by commit...
GSD-2022-1006563 sfc: fix TX channel offset when using legacy interrupts
sfc: fix TX channel offset when using legacy interrupts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...
PT-2022-34845 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.122 through 5.10.145 Description: The issue concerns a fix for the TX channel offset when using legacy interrupts in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...
PT-2022-34779 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue concerns a fix for the TX channel offset when using legacy interrupts in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
