CVE-2025-0985

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user...

CVE-2025-0985 IBM MQ information disclosure

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user...

CVE-2025-0985

Summary (CVE-2025-0985): IBM MQ 9.3 LTS/9.3 CD and 9.4 LTS/9.4 CD may store potentially sensitive information in environment variables that could be obtained by a local user. The CVSSv3.1 base score is 6.5 (Medium), with impact on confidentiality only. No exploitation details are provided in the ...

CVE-2024-9193 WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update

The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.3-revision-0 via the whmpressdomainsearchajaxextendedresults function. This makes it possible for unauthenticated attackers to include and execute...

CVE-2024-54173

IBM MQ (versions 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD) is affected by CVE-2024-54173, which can disclose potentially sensitive information from trace files read by a local user when webconsole trace is enabled. The root cause is improper management of sensitive trace data (CWE-1323). Impact is lo...

CVE-2025-1091

A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known...

IBM MQ 安全漏洞

IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and validated messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ that stems from the possibility of local users reading...

CVE-2024-56810

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-56495

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-56494

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-56810

IBM EntireX 11.1 contains a local information-disclosure vulnerability where returning detailed technical error messages can reveal sensitive data to a local user. Affected product/version: IBM EntireX 11.1. Root cause: detailed error messages exposing sensitive information. Impact: potential inf...

CVE-2024-56810 IBM EntireX information disclosure

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-56811

CVE-2024-56811 affects IBM EntireX 11.1. An information-disclosure vulnerability allows a local user to obtain sensitive data by triggering a detailed technical error message returned by the system. The issue is tied to the error message contents, enabling information leakage that could assist fu...

CVE-2024-56812 IBM EntireX information disclosure

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-0392

CVE-2024-0392 describes a CSRF vulnerability in the management console of WSO2 Enterprise Integrator 6.6.0 caused by the absence of CSRF token validation. The vulnerability can enable an attacker to trigger certain state-changing operations on behalf of an authenticated user via crafted requests,...

PT-2025-8954 · Ibm · Ibm Entirex

Name of the Vulnerable Software and Affected Versions: IBM EntireX version 11.1 Description: A local user could obtain sensitive information when a detailed technical error message is returned, which could be used in further attacks against the system. Recommendations: For IBM EntireX version 11....

CVE-2022-49289

In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on accessok Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns...

CVE-2022-49289

CVE-2022-49289 : The Linux kernel fixed an integer overflow in uaccess() during access_ok() checks. Three architectures could mis-handle a negative length/overflow at the end of a user access, potentially returning success when it should not. The fix replaces the overflow-prone check with the com...

CVE-2022-49289 uaccess: fix integer overflow on access_ok()

In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on accessok Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns...

CVE-2022-49289

In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on accessok Three architectures check the end of a user access against the address limit without taking a possible overflow into account. Passing a negative length or another overflow in here returns...