708 matches found
The vulnerability of Xen hypervisors on x86 Intel systems, related to the lack of a mechanism for managing privileges, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Xen hypervisors on x86 Intel systems is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the CIS library for asynchronous DNS requests allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability stems from the lack of measures taken to protect the structure of web pages.
The vulnerability of the CIS library for asynchronous DNS requests is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service interruptions...
CVE-2022-21262
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...
IBM Data Risk Manager Authentication Bypass (CVE-2020-4427)
An authentication bypass vulnerability exists in IBM Data Risk Manager. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Security Bulletin: Vulnerability in Apache Log4j affects IBM Data Risk Manager (CVE-2021-45105, CVE-2021-45046)
Summary IBM Data Risk Manager IDRM 2.0.6.10 and earlier is impacted by Log4j CVE-2021-45105, CVE-2021-45046. This vulnerability has been addressed in the updated version of IDRM 2.0.6.11 which includes Apache Log4j 2.17.1. Please see remediation steps below to apply fix. All customers encouraged ...
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
Summary IBM Data Risk Manager has addressed the following vulnerabilities: Vulnerability Details CVEID: CVE-2021-22096 DESCRIPTION: VMware Spring Framework could allow a remote attacker to bypass security restrictions. By sending a specially-crafted input, an attacker could exploit this...
IBM Data Risk Manager Arbitrary File Download (CVE-2020-4430)
An arbitrary file download vulnerability exists in IBM Data Risk Manager. Successful exploitation of this vulnerability would allow a remote attacker to download arbitrary files from affected system...
Security Bulletin: Vulnerability in Apache Log4j affects IBM Data Risk Manager (CVE-2021-44228)
Summary IBM Data Risk Manager IDRM 2.0.6.9 and earlier is impacted by Log4Shell CVE-2021-44228, through the use of Apache Log4j's JNDI logging feature. This vulnerability has been addressed in the updated version of IDRM 2.0.6.10. Please see remediation steps below to apply fix. All customers...
Phpgurukul Employee Record Management System SQL注入漏洞
Employee Record Management System is an employee record management system. Employee Record Management System has a SQL injection vulnerability that originates from an SQL injection bypass authentication vulnerability via index.php, which can be exploited by an attacker to corrupt, alter, or...
IBM Spectrum Copy Data Management 加密问题漏洞
IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies and automates data center copy management processes, is vulnerable to an encryption issue that stems from the fact that IBM Spectrum Copy Data Management uses a weaker-than-expected encryption algorithm, which could be...
The vulnerability of the application for identifying, analyzing, and visualizing business risks in IBM Data Risk Manager, related to the failure to take measures to neutralize specific elements, allows a perpetrator to execute arbitrary commands.
The vulnerability of the IBM Data Risk Manager application for identifying, analyzing, and visualizing business risks is related to the failure to take measures to neutralize specific elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrar...
The vulnerability of the application for identifying, analyzing, and visualizing business risks in IBM Data Risk Manager stems from deficiencies in checking the path name to the restricted access catalog. This allows attackers to write arbitrary files.
The vulnerability of the IBM Data Risk Manager application for identifying, analyzing, and visualizing business risks is related to deficiencies in checking the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to upload...
The vulnerability of the SAML (Security Assertion Markup Language) implementation of the IBM Data Risk Manager application, which allows attackers to bypass security mechanisms for identifying, analyzing, and visualizing business risks.
The vulnerability of the SAML Security Assertion Markup Language implementation of the IBM Data Risk Manager application, which is used for identifying, analyzing, and visualizing business risks, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow...
VulnCheck KEV: CVE-2020-4427
IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication...
VulnCheck KEV: CVE-2020-4428
IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�...
IBM Data Risk Manager Directory Traversal Vulnerability
IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system...
IBM Data Risk Manager Remote Code Execution Vulnerability
IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�...
VulnCheck KEV: CVE-2020-4430
IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system...
IBM Data Risk Manager Security Bypass Vulnerability
IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication proces...