CVE-2020-7239

The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent...

CVE-2020-7239

The CVE-2020-7239 entry concerns the WordPress plugin conversation-watson (before 0.8.21). The vulnerability is a DOM-based XSS that is triggered when a chat message containing JavaScript is sent, indicating an input/output filtering weakness in the plugin's handling of client-side data. The Red ...

Chatbot with IBM Watson < 0.8.21 - DOM Cross-Site Scripting (XSS)

Note: The issue could be qualified of Self-XSS...

WordPress Chatbot with IBM Watson plugin <= 0.8.20 - DOM Cross-Site Scripting (XSS) vulnerability

DOM Cross-Site Scripting XSS vulnerability found by Hooper Labs in WordPress Chatbot with IBM Watson plugin versions = 0.8.20. Solution Update the WordPress Chatbot with IBM Watson plugin to the latest available version at least 0.8.21...

Security Bulletin: A security vulnerability has been identified in Werkzeug shipped with PowerAI.

Summary Vulnerability CVE-2019-14806 in Werkzeug package. Vulnerability Details CVEID: CVE-2019-14806 DESCRIPTION: Pallets Werkzeug versions prior to 0.15.3 used with Docker have insufficient debugger PIN randomness because Docker containers share the same machine ID. CVSS Base score: 7.5 CVSS...

Security Bulletin: IBM Watson Studio - Local allows mounting glusterFS without security check

Summary Watson Studio Local was allowing glusterFS mounting without any authorization. As long as the user had access to the same network, they could mount gluster volumes in any cluster. Internal implementation has been changed to check for permission before glusterFS mounting is allowed...

CVE-2018-1682

IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238...

CVE-2019-4335

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413...

CVE-2019-4335

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413...

CVE-2018-1682

IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238...

Design/Logic Flaw

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413...

Information disclosure

IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238...

CVE-2019-4335

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413...

CVE-2019-4335

IBM Watson Studio Local 1.2.3 stores key files in the user’s home directory, which could be obtained by another local user. Root cause: insecure storage location leads to potential key exposure. Impact: confidentiality could be HIGH; access is LOCAL, no user interaction required. No exploitation ...

CVE-2018-1682

CVE-2018-1682 affects IBM Watson Studio Local 1.2.3 and corresponds to an information disclosure vulnerability that can leak sensitive information over the network. The CVSS data indicates a network attack with low complexity and no authentication, with a CONFIDENTIALITY impact of LOW and no inte...

CVE-2018-1682

IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238...

IBM Watson Studio Local Information Disclosure Vulnerability

IBM Watson Studio Local is a suite of collaborative data processing solutions from IBM, USA. The product includes features such as data analysis, data visualization, data cleansing and streaming data extraction. A security vulnerability exists in IBM Watson Studio Loca version 1.2.3. An attacker...

IBM Watson Studio Local Local Secret Key Storage Vulnerability

IBM Watson Studio Local is a suite of collaborative data processing solutions from IBM, USA. The product includes features such as data analysis, data visualization, data cleansing and streaming data extraction. A security vulnerability exists in IBM Watson Studio Local version 1.2.3, which...

Security Bulletin: Vulnerabilities in Samba affects IBM Watson Studio Local

Summary Vulnerabilities in Samba affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-10197 DESCRIPTION: A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration...

Security Bulletin: Vulnerabilities in Kubernetes affects IBM Watson Studio Local

Summary Vulnerabilities in Kubernetes affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-11249 DESCRIPTION: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a...