CVE-2024-47916

The CVE concerns the Boa web server with a path traversal (CWE-22) flaw due to improper limitation of a pathname to a restricted directory. Affected software is Boa web server; the root cause is incorrect pathname restriction that allows access outside the intended directory. Documented impact ce...

CVE-2024-47915 VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-47915 VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-47915

CVE-2024-47915 relates to VaeMendis Ubooquity vulnerability (reported in CVE records) where sensitive information can be exposed to unauthorized actors. Public details across sources indicate an information disclosure issue affecting VaeMendis Ubooquity, with a concrete product/version mentioned ...

CVE-2024-47914 VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)

VaeMendis - CWE-352: Cross-Site Request Forgery CSRF...

CVE-2024-47914

CVE-2024-47914 is tied to a CSRF vulnerability affecting VaeMendis Ubooquity (reported by CNNVD as version 2.1.2). The available connected sources identify Cross-Site Request Forgery as the issue and attribute affected software to VaeMendis/Ubooquity, but do not provide a precise vulnerable compo...

CVE-2024-45254 VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-45254 VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-45254

The CVE CVE-2024-45254 concerns Vaemendis products (e.g., Vaemendis Ubooquity) with a Cross-site Scripting (CWE-79) flaw caused by improper input neutralization during web page generation. The NVD entry records CVSS v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no ...

CVE-2024-45253 Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2024-45253

CVE-2024-45253 describes a path traversal (CWE-22) in Avigilon products. The CVSS 3.1 vector indicates NETWORK exploitation, LOW attack complexity, no privileges required, and no user interaction, with the impact limited to confidentiality (HIGH) and no integrity/availability impact per the provi...

CVE-2024-45253 Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2024-45254: Improper Neutralization of Input During Web Page Generation

VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-47914: Cross-Site Request Forgery (CSRF)

VaeMendis - CWE-352: Cross-Site Request Forgery CSRF...

CVE-2024-47916: Improper Limitation of a Pathname to a Restricted Directory

Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2024-45253: Improper Limitation of a Pathname to a Restricted Directory

Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

Security Bulletin: Security Vulnerabilities in node.js packages affect IBM Voice Gateway

Summary Security Vulnerabilities in node.js packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-37890 DESCRIPTION: Node.js ws module is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially...

Security Bulletin: IBM Event Processing susceptible improper validation

Summary IBM Event Processing vulnerable to cross-site scripting, caused by improper validation CVE-2024-43788 Vulnerability Details CVEID:CVE-2024-43788 DESCRIPTION: Webpack and Rspack are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote...

Security Bulletin: Multiple Vulnerabilities in IBM Event Processing

Summary Multiple base image vulnerabilities were addressed in IBM Event Processing version 1.2.2. Vulnerability Details CVEID:CVE-2024-47176 DESCRIPTION: OpenPrinting cups-browsed could allow a remote attacker to obtain sensitive information, caused by the binding on UDP INADDRANY:631 and trustin...

Security Bulletin: IBM Sterling Transformation Extender is affected by multiple IBM Java 8 vulnerabilities

Summary IBM Sterling Transformation Extender uses IBM SDK, Java Technology, version 8. Vulnerability Details CVEID:CVE-2024-21147 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentiality, high integrity impacts...