372 matches found
Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2022-40750)
Summary IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console when using the Application Migration Report function. This has been addressed. Vulnerability Details CVEID:CVE-2022-40750 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site...
LavaLite 路径遍历漏洞
LavaLite is an open source lightweight content management system CMS. A path traversal vulnerability exists in LavaLite version 9.0.0, which stems from the vulnerability of its SRF-TOKEN cookie to path traversal attacks, allowing read access to arbitrary files on the server...
PT-2022-25820 · Zimbra · Zimbra Collaboration
Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration ZCS version 9.0 Description: An issue in Zimbra Collaboration allows XSS to occur via the onerror attribute of an IMG element. This can lead to information disclosure. Recommendations: For Zimbra Collaboration ZCS version...
Security Bulletin: IBM MQ is vulnerable to an issue within the Zlib library (CVE-2018-25032)
Summary An issue was identified within the Zlib library that affects IBM MQ. IBM MQ uses Zlib to perform message compression. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a memory corruption in the deflate operation. By using many...
Zimbra Collaboration Suite 路径遍历漏洞
Zimbra Collaboration Suite ZCS is an open source collaborative office suite. The product includes WebMail, Calendar, Address Book, etc. A security vulnerability exists in Zimbra Collaboration Suite ZCS versions 8.8.15 and 9.0, which stems from a lack of valid authentication of uploaded files by t...
AZL-10828 CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1
Use After Free in GitHub repository vim/vim prior to 9.0.0360...
Use After Free in function do_tag
Description Use After Free in function dotag at vim/src/tag.c:807. vim version ./vim --version VIM - Vi IMproved 9.0 2022 Jun 28, compiled Sep 2 2022 22:56:19 Included patches: 1-363 Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/elva/fuzzvim/test/poc8huaf.dat -c :qa!...
PT-2022-23858 · 72Crm · 72Crm
Name of the Vulnerable Software and Affected Versions: 72crm version 9.0 Description: An issue was discovered in 72crm, where there is a SQL Injection vulnerability in the functionality to View the task calendar. Recommendations: For 72crm version 9.0, at the moment, there is no information about...
Security Bulletin: IBM License Metric Tool, IBM Endpoint Manager for Software Use Analysis and IBM Tivoli Asset Discovery for Distributed Java-related vulnerabilities - October 2014
Summary IBM License Metric Tool, IBM Endpoint Manager for Software Use Analysis and IBM Tivoli Asset Discovery for Distributed are vulnerable to attacks related to Java vulnerabilites. This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption POODLE SSLv3 vulnerability...
Zimbra Collaboration Suite 路径遍历漏洞
Zimbra Collaboration Suite ZCS is an open source collaboration suite from Zimbra in the United States. The product includes WebMail, Calendar, Address Book and more. A path traversal vulnerability exists in Zimbra Collaboration Suite version 8.8.15, 9.0. An attacker can exploit this vulnerability...
Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2022-22477, CVE-2022-22473)
Summary IBM WebSphere Application Server WAS is used by the IBM Rational ClearQuest server and web components. Information about security vulnerabilities affecting WAS have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...
Veritas NetBackup 安全漏洞
Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection of environmental data such as metadata and virtual environments. A security vulnerabilit...
CVE-2022-36956
In Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote host that has access to a valid host-id NetBackup certificate/private key from the same domain. The affects 9.0.x through 9.0.0.1 and 9.1.x through 9.1.0.1...
Security Bulletin: A security vulnerability has been identified in WebSphere® Application Server shipped with IBM® Intelligent Operations Center (CVE-2022-22477)
Summary IBM WebSphere® Application Server is shipped with IBM® Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere® Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...
DEBIAN-CVE-2022-2304
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...
CVE-2022-2289
Use After Free in GitHub repository vim/vim prior to 9.0...
CVE-2022-2289
Use After Free in GitHub repository vim/vim prior to 9.0...
CVE-2022-2286
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...