Security Bulletin: IBM Event Streams is affected by a Node.js http-proxy and lodash module vulnerabilities

Summary IBM Event Streams is affected by a Node.js http-proxy and lodash module denial of service vulnerabilities Vulnerability Details Third Party Entry: 183560 DESCRIPTION: Node.js lodash module denial of service CVSS Base score: 7.5 CVSS Temporal Score: See:...

CVE-2018-16361

BTITeam XBTIT 2.5.4 is affected in news.php where the id parameter enables cross-site scripting (XSS). The root cause is likely inadequate input handling in news.php, allowing injected script to be executed by victims. No remediation details are provided in the connected documents; therefore, a p...