PrivEsc (Priviledge Escalation) org.apache.tomcat:tomcat-coyote Dependency in Crowd Data Center

This High severity PrivEsc Priviledge Escalation vulnerability was introduced in version 7.2.0 of Crowd Data Center. This PrivEsc Priviledge Escalation vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H allows an unauthenticated attacker to...

MITM (Man-in-the-Middle) io.netty:netty-handler Dependency in Crowd Data Center

This High severity MITM Man-in-the-Middle vulnerability was introduced in version 7.2.0 of Crowd Data Center. This MITM Man-in-the-Middle vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N allows an unauthenticated attacker...

Insecure Deserialization com.mchange:mchange-commons-java Dependency in Crowd Data Center

This High severity Insecure Deserialization vulnerability was introduced in version 7.2.0 of Crowd Data Center. This Insecure Deserialization vulnerability, with a CVSS Score of 7.1 and a CVSS Vector of CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H allows an authenticated attacker to expose assets...

Cryptographic Failure org.bouncycastle:bcprov-lts8on Dependency in Crowd Data Center

This Critical severity Cryptographic Failure vulnerability was introduced in version 7.2.0 of Crowd Data Center. This Cryptographic Failure vulnerability, with a CVSS Score of 9.3 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber allows an unauthenticate...

DoS (Denial of Service) org.apache.httpcomponents.core5:httpcore5-h2 Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

DoS (Denial of Service) org.apache.httpcomponents.core5:httpcore5 Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

Prototype Pollution axios Dependency in Crowd Data Center

This High severity Prototype Pollution vulnerability was introduced in version 7.2.1 of Crowd Data Center. This Prototype Pollution vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H allows an unauthenticated attacker to expose assets in your...

SSRF (Server-Side Request Forgery) axios Dependency in Crowd Data Center

This High severity SSRF Server-Side Request Forgery vulnerability was introduced in version 7.2.2 of Crowd Data Center. This SSRF Server-Side Request Forgery vulnerability, with a CVSS Score of 8.6 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N allows an unauthenticated attacke...

DoS (Denial of Service) axios Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.1 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

MITM (Man-in-the-Middle) axios Dependency in Crowd Data Center

This High severity MITM Man-in-the-Middle vulnerability was introduced in version 7.2.1 of Crowd Data Center. This MITM Man-in-the-Middle vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N allows an authenticated attacker to potentially...

DoS (Denial of Service) axios Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.1 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

DoS (Denial of Service) axios Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to expose assets in...

MITM (Man-in-the-Middle) axios Dependency in Crowd Data Center

This High severity MITM Man-in-the-Middle vulnerability was introduced in version 7.2.0 of Crowd Data Center. This MITM Man-in-the-Middle vulnerability, with a CVSS Score of 7.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N allows an unauthenticated attacker to potentially...

CVE-2026-12669

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-15661 IBM Concert Software Improper Output Neutralization for Logs

IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

CVE-2026-15661 IBM Concert Software Improper Output Neutralization for Logs

IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

CVE-2026-15661

IBM Concert versions 1.0 through 3.0.0 are vulnerable to a flaw that allows an unauthorized user to inject data into log messages . This issue is caused by the improper neutralization of special elements when information is written to log files (CWE-117). The impact is classified as a Medium seve...

hdx-data-freshness (>=1.0.5, <=1.1.2), pyplanet (>=0.6.0rc1, <=0.10.5) potentially affected by CVE-2026-111064 via aiohttp (2.3.9)

aiohttp PYPI version 2.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hdx-data-freshness =1.0.5, =0.6.0rc1, =0.10.5 Source cves: CVE-2026-111064 Source advisory: OSV:GHSA-5WR8-GCQF-GQF3...

hdx-data-freshness (>=1.0.5, <=1.1.2), pyplanet (>=0.6.0rc1, <=0.10.5) potentially affected by CVE-2026-111063 via aiohttp (2.3.9)

aiohttp PYPI version 2.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hdx-data-freshness =1.0.5, =0.6.0rc1, =0.10.5 Source cves: CVE-2026-111063 Source advisory: OSV:GHSA-494J-54XM-RWP3...

Security Bulletin: Multiple Vulnerabilities have been found in IBM Guardium Data Protection, including DataLake deployments

Summary Multiple Vulnerabilities have been addressed in IBM Guardium Data Protection, including DataLake deployments Vulnerability Details CVEID:CVE-2026-66053 DESCRIPTION: Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects...