IBM Financial Transaction Manager 代码问题漏洞

IBM Financial Transaction Manager for Check Services FTM CHK is a financial transaction manager from IBM, USA. The product is primarily used to monitor, track and report on financial payments and transactions. A security vulnerability exists in IBM Financial Transaction Manager that stems from th...

CVE-2020-5003: Improper Restriction of XML External Entity Reference

IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 192956...

CVE-2020-24662

SmartStream Transaction Lifecycle Management TLM Reconciliation Premium RP 3.1.0 allows XSS. This was fixed in TLM RP 3.1.0...

PT-2021-11054

Name of the Vulnerable Software and Affected Versions: SmartStream Transaction Lifecycle Management TLM Reconciliation Premium RP versions prior to 3.1.0 Description: The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a...

CVE-2020-5003

IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 192956...

SmartStream Transaction Lifecycle Management 跨站脚本漏洞

Transaction Lifecycle Management is SmartStream's SmartStream's registration approach to solving operational processing challenges by understanding the end-to-end flow of transactions from inception to settlement. Improved automation and visibility is achieved through an independent approach to...

CVE-2020-24662: Improper Neutralization of Input During Web Page Generation

SmartStream Transaction Lifecycle Management TLM Reconciliation Premium RP 3.1.0 allows XSS. This was fixed in TLM RP 3.1.0...

UVI-2021-1000587 btrfs: release path before starting transaction when cloning inline extent

btrfs: release path before starting transaction when cloning inline extent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

UVI-2021-1000539 btrfs: release path before starting transaction when cloning inline extent

btrfs: release path before starting transaction when cloning inline extent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

glibc security update

2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...

The vulnerability of the GSS-TSIG component of the BIND server, related to writing beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the GSS-TSIG component of the BIND server is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created request...

UVI-2021-1000147 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by comm...

GSD-2021-1000113 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by comm...

UVI-2021-1000113 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by comm...

GSD-2021-1000073 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commi...

PT-2021-24746

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.3 Description The issue is related to a fix for an off-by-one error in the hdmi 14 process transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-28614

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A race condition exists between transaction aborts and fsyncs, potentially leading to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2021-28841

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a fix for an off-by-one error in the hdmi 14 process transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-24847

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to a fix for an off-by-one error in the hdmi 14 process transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-28580

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A race condition exists between transaction aborts and fsyncs, potentially leading to a use-after-free issue. The actual impact and attack plausibility have not yet been proven. Recommendatio...