Lucene search
+L

1004 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2021/10/14 9:10 p.m.48 views

Security Bulletin: Multiple Websphere Vulnerabilities Impact IBM Control Center (CVE-2021-35517, CVE-2021-36090)

Summary There are multiple vulnerabilities in Websphere that is used by Control Center. Vulnerability Details CVEID: CVE-2021-35517 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an out of memory error when allocating large amounts of memory. By persuading a...

7.5CVSS1.5AI score0.12945EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/13 10:27 p.m.48 views

Security Bulletin: Apache PDFBox Vulnerabilities Affect IBM Control Center (CVE-2021-31811, CVE-2021-31812)

Summary Apache PDFBox is vulnerable to denial of service due to possible out of memory or infinite looping conditions. Vulnerability Details CVEID: CVE-2021-31811 DESCRIPTION: Apache PDFBox is vulnerable to a denial of service, caused by an out-of-memory exception while loading a file. By...

5.5CVSS1.8AI score0.03445EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/30 5:03 a.m.123 views

Security Bulletin: Apache Log4j Vulnerability Affects IBM Control Center (CVE-2020-9488)

Summary Apache Log4j is vulnerable to a man-in-the-middle attack Vulnerability Details CVEID: CVE-2020-9488 DESCRIPTION: Apache Log4j is vulnerable to a man-in-the-middle attack, caused by improper certificate validation with host mismatch in the SMTP appender. An attacker could exploit this...

4.3CVSS1.7AI score0.08096EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/30 5:03 a.m.23 views

Security Bulletin: Castor Vulnerability Affects IBM Control Center (CVE-2014-3004)

Summary Castor Library could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE error when processing XML data. Vulnerability Details CVEID: CVE-2014-3004 DESCRIPTION: Castor Library could allow a remote attacker to obtain sensitive information...

4.3CVSS8.6AI score0.07857EPSS
SaveExploits4Affected Software1
NVD
NVD
added 2021/07/22 6:15 p.m.40 views

CVE-2015-2099

Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the 1 GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, 2 Login function in the LoginContoller.LoginControllerCtrl.1 control, or 3 GetThumbnail...

8.8CVSS0.1407EPSS
SaveExploits3References3
NVD
NVD
added 2021/07/22 6:15 p.m.19 views

CVE-2015-2100

Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the 1 TCPDiscover or 2 TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control...

8.8CVSS0.02929EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/22 6:15 p.m.6 views

CVE-2015-2099

Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the 1 GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, 2 Login function in the LoginContoller.LoginControllerCtrl.1 control, or 3 GetThumbnail...

8.8CVSS6.4AI score0.1407EPSS
SaveExploits3References4
Prion
Prion
added 2021/07/22 6:15 p.m.17 views

Stack overflow

Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the 1 TCPDiscover or 2 TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control...

6.8CVSS8.5AI score0.02929EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/22 5:10 p.m.82 views

CVE-2015-2099

CVE-2015-2099 corresponds to multiple buffer overflow vulnerabilities in WebGate Control Center. The affected ActiveX controls and entry points are GetRecFileInfo (FileConverter.FileConverterCtrl.1), Login (LoginContoller.LoginControllerCtrl.1), and GetThumbnail (WESPPlayback.WESPPlaybackCtrl.1)....

8.8CVSS8.9AI score0.1407EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2021/07/22 5:10 p.m.36 views

CVE-2015-2099

Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the 1 GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, 2 Login function in the LoginContoller.LoginControllerCtrl.1 control, or 3 GetThumbnail...

9AI score0.1407EPSS
SaveExploits3References3
Cvelist
Cvelist
added 2021/07/22 5:09 p.m.29 views

CVE-2015-2100

Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the 1 TCPDiscover or 2 TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control...

9AI score0.02929EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/22 5:09 p.m.53 views

CVE-2015-2100

CVE-2015-2100 concerns stack-based buffer overflows in WebGate WebGate eDVR Manager and Control Center components, specifically the WESPDiscovery.WESPDiscoveryCtrl.1 ActiveX control’s TCPDiscovery and TCPDiscovery2 paths. The flaw allows remote code execution and is characterized by overflows in ...

8.8CVSS9AI score0.02929EPSS
SaveExploits0References2Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/16 7:41 p.m.52 views

Security Bulletin: ICU Vulnerability Affects IBM Control Center (CVE-2020-10531)

Summary International Components for Unicode ICU for C/C++ is vulnerable to a heap-based buffer overflow, caused by an integer overflow. Vulnerability Details CVEID: CVE-2020-10531 DESCRIPTION: International Components for Unicode ICU for C/C is vulnerable to a heap-based buffer overflow, caused ...

8.8CVSS9.4AI score0.02669EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/16 7:25 p.m.31 views

Security Bulletin: Multiple JasperReports Vulnerabilities Affect IBM Control Center (CVE-2020-9410, CVE-2018-18809)

Summary JasperReports Library and JasperReports Server are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. Vulnerability Details CVEID: CVE-2020-9410 DESCRIPTION: TIBCO JasperReports Library and JasperReports Server are vulnerable to cross-site scripting,...

9.9CVSS0.5AI score0.79064EPSS
SaveExploits4Affected Software1
CNVD
CNVD
added 2021/06/02 12:00 a.m.15 views

IBM Cognos Analytics Information Disclosure Vulnerability (CNVD-2021-38674)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An information disclosure...

7.5CVSS6AI score0.02371EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/28 12:00 a.m.7 views

IBM Cognos Analytics 授权问题漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An information disclosure...

7.5CVSS8.4AI score0.02371EPSS
SaveExploits0References4
NVD
NVD
added 2021/05/27 10:15 p.m.17 views

CVE-2021-33408

Local File Inclusion vulnerability in Ab Initio ControlCenter before 4.0.2.6 allows remote attackers to retrieve arbitrary files. Fixed in v4.0.2.6 and v4.0.3.1...

6.5CVSS0.00676EPSS
SaveExploits0References1
Prion
Prion
added 2021/05/27 10:15 p.m.17 views

Remote file inclusion

Local File Inclusion vulnerability in Ab Initio ControlCenter before 4.0.2.6 allows remote attackers to retrieve arbitrary files. Fixed in v4.0.2.6 and v4.0.3.1...

4CVSS6.6AI score0.00676EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/05/27 9:46 p.m.82 views

CVE-2021-33408

CVE-2021-33408 affects Ab Initio Control Center before 4.0.2.6, describing a Local File Inclusion vulnerability that enables remote retrieval of arbitrary files. The root cause is an LFI condition in the Control Center component prior to the fixed versions. Impact is the ability to access sensiti...

6.5CVSS6.5AI score0.00676EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/05/27 9:46 p.m.22 views

CVE-2021-33408

Local File Inclusion vulnerability in Ab Initio ControlCenter before 4.0.2.6 allows remote attackers to retrieve arbitrary files. Fixed in v4.0.2.6 and v4.0.3.1...

6.8AI score0.00676EPSS
SaveExploits0References1
Rows per page
Query Builder