CVE-2024-30249 Cloudburst Network DoS in RakNet connection handling

Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to 1.0.0.CR1-20240330.101522-15 impacts publicly accessible software depending on the affected versions of Network and allows an attacker to use Network as an amplification vector for...

Undertow HTTP header injection and response splitting vulnerability

Red Hat Undertow is a U.S. Red Hat Red Hat, a Java-based embedded Web server, is the default Web server Wildfly Java application server. A security vulnerability exists in Red Hat Undertow versions prior to 7.1.2.CR1 and prior to 7.1.2.GA, which stems from the program failing to adequately filter...

CVE-2016-2955

CVE-2016-2955 is an XSS vulnerability in IBM Connections 5.0 before CR4 and 5.5 before CR1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Affected products/versions: IBM Connections 5.0 (pre-CR4) and 5.5 (pre-CR1). The connected source...

CVE-2016-3003

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3006...

CVE-2016-2999

CVE-2016-2999 affects IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1. The issue is described as an information disclosure via an unspecified brute-force attack accessible to remote authenticated users. The available documents do not provide concrete technical details abou...

CVE-2016-3008

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956...

CVE-2016-2954

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2956 and CVE-2016-3008...

CVE-2016-2954

CVE-2016-2954 is an XSS vulnerability in the IBM Connections Web UI. Affects IBM Connections 5.0 before CR4 and 5.5 before CR1; remote authenticated users can inject arbitrary web script or HTML via unspecified vectors. This entry is differentiated from CVE-2016-2956 and CVE-2016-3008. The provid...

CVE-2016-3008

CVE-2016-3008 is an XSS vulnerability in IBM Connections Web UI (5.0 before CR4, 5.5 before CR1) allowing remote authenticated users to inject arbitrary scripts via unspecified vectors. The connected sources do not provide explicit exploit details, patch versions, or confirmed in-the-wild exploit...