2142 matches found
PT-2022-22036
Name of the Vulnerable Software and Affected Versions IBM CICS TX Standard and Advanced version 11.1 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
PT-2022-22035
Name of the Vulnerable Software and Affected Versions IBM CICS TX Standard and Advanced version 11.1 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
PT-2022-22117 · Ibm · Ibm Cics Tx Standard +1
Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard and Advanced version 11.1 Description: The issue is caused by improper validation of input by the HOST headers, leading to HTTP header injection. This could allow an attacker to conduct various attacks against the...
CVE-2022-34160: Improper Neutralization of Input During Web Page Generation
IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 229330...
CVE-2022-34166: Improper Neutralization of Input During Web Page Generation
IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229430...
CVE-2022-34306
IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. I...
CVE-2022-34166
IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229430...
GSD-2022-1003527 sfc: fix considering that all channels have TX queues
sfc: fix considering that all channels have TX queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...
GSD-2022-1003092 mt76: fix tx status related use-after-free race on station removal
mt76: fix tx status related use-after-free race on station removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...
GSD-2022-1002963 sfc: fix considering that all channels have TX queues
sfc: fix considering that all channels have TX queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...
GSD-2022-1002761 mt76: fix tx status related use-after-free race on station removal
mt76: fix tx status related use-after-free race on station removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...
GSD-2022-1002631 sfc: fix considering that all channels have TX queues
sfc: fix considering that all channels have TX queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
PT-2022-31024
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.18.2 Description A use-after-free race condition exists related to tx status on station removal. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-31226
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...
PT-2022-31790
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...
IBM CICS TX Standard and Advanced Operating System Command Injection Vulnerability
IBM CICS TX Standard and Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Standard and Advanced is vulnerable to operating system command injection, which can be exploited by...
PT-2022-31355
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.17.13 Description A use-after-free race condition exists related to tx status on station removal. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-31532
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the sfc driver in the Linux Kernel, where a fix is applied considering all channels have TX queues. The actual impact and attack plausibility have not yet been proven...
