CVE-2023-36679 WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6...

CVE-2023-36679 WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6...

Security Bulletin: Denial of Service vulnerability affects IBM Business Automation Workflow (IBM X-Force ID 270419)

Summary IBM Business Automation Workflow is vulnerable to a Denial of Service attack. Vulnerability Details IBM X-Force ID: 270419 DESCRIPTION: Enterprise Security API for Java is vulnerable to a denial of service, caused by a flaw in the HTTPUtilities.getFileUploads methods. By sending a special...

CVE-2024-27270

IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576...

CVE-2024-28784

IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285893...

CVE-2024-29768

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra allows Stored XSS.This issue affects Astra: from n/a through 4.6.4...

CVE-2023-50961

IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275939...

CVE-2024-29768

CVE-2024-29768 : Stored XSS in Astra (Brainstorm Force) affecting versions up to 4.6.4. Root cause: improper neutralization of input during web page generation. Public details confirm the vulnerability; no remediation/version fix is specified in the provided documents.

CVE-2024-29768 WordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra allows Stored XSS.This issue affects Astra: from n/a through 4.6.4...

CVE-2024-27270

CVE-2024-27270 affects IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3, enabling cross-site scripting via a specially crafted URI that could embed arbitrary JavaScript. The connected IBM bulletins confirm this CVE within Liberty and recommend upgrading to the latest Liberty fix...

CVE-2024-27270 IBM WebSphere Application Server Liberty cross-site scripting

IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576...

CVE-2023-50961

CVE-2023-50961 affects IBM QRadar SIEM 7.5. It is a stored cross-site scripting vulnerability in the web UI that could allow a remote authenticated attacker to execute arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s bulletin confirms the issue a...

CVE-2023-50961 IBM QRadar cross-site scripting

IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275939...

CVE-2023-50961 IBM QRadar cross-site scripting

IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275939...

CVE-2024-28784 IBM QRadar cross-site scripting

IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285893...

CVE-2024-28784

CVE-2024-28784 affects IBM QRadar SIEM 7.5. A stored XSS vulnerability exists in the Rule Wizard component (Regular Expression Logic Block) due to improper input sanitization, enabling an attacker to inject and persist arbitrary HTML/JavaScript that can execute in other authenticated users’ brows...

Improper Restriction Of Excessive Authentication Attempts

github.com/argoproj/argo-cd/ is vulnerable to Improper Restriction Of Excessive Authentication Attempts. This vulnerability is due to a weak cache-based mechanism that allows attackers to bypass rate limit and brute force protections, which can result in account compromise...

IBM WebSphere Application Server Liberty 23.0.0.3 < 24.0.0.4 XSS (7145231)

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a XSS vulnerability as referenced in the 7145231 advisory. - IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users ...

PT-2024-12475 · Elementor +2 · Elementor +3

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates versions 3.2.4 and earlier Brainstorm Force Premium Starter Templates versions 3.2.4 and earlier Description: A Server-Side Request Forgery SSRF issue affect...

CVE-2024-22356

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in log or trace files that could be read by a privileged user. IBM X-Force ID: 280893...