25747 matches found
CVE-2024-25021 IBM AIX command execution
IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary commands. IBM X-Force ID: 281320...
CVE-2024-1104
CVE-2024-1104 affects AREAL Topkapi security platform, specifically Webserv2. The vulnerability arises from a bypass of the brute-force protection mechanism, enabling an unauthenticated remote attacker to disturb the webservice for all users. Reports from multiple sources (Topkapi-related CVE ent...
CVE-2024-1104 Temporary denial of service during a brute force attack
An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users...
CVE-2024-1104 Temporary denial of service during a brute force attack
An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users...
Topkapi Security Vulnerability
AREAL Topkapi is a software platform from AREAL. A security vulnerability exists in Topkapi Webserv2 6.2.4776 and earlier versions, which originates from a brute force login attack that can cause a temporary denial of service to a website...
Dell RecoverPoint for Virtual Machines Brute Force Vulnerability
Dell RecoverPoint for Virtual Machines is a disaster recovery solution for VMware environments from Dell. A brute force vulnerability exists in Dell RecoverPoint for Virtual Machines, which can be exploited by an attacker to brute-force break a valid user's password in an automated fashion...
PT-2024-16722 · Areal Topkapi · Webserv2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users. Recommendations: At the...
IBM PowerSC Information Disclosure Vulnerability
IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. IBM PowerSC suffers from an information disclosure vulnerability vulnerability that stems from not using proper account lockout settings, which can be exploited by an attacker to...
CVE-2023-33843
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256544...
CVE-2023-50955
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777...
Cross site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256544...
CVE-2023-50955 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777...
CVE-2023-50955 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777...
CVE-2023-33843
CVE-2023-33843 affects IBM InfoSphere Information Server 11.7. The vulnerability is a cross-site scripting in the Web UI, allowing injection of arbitrary JavaScript and potentially leading to credentials disclosure within a trusted session. IBM’s bulletin confirms the issue and provides remediati...
CVE-2023-50306
IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy. IBM X-Force ID: 273337...
CVE-2023-50306 IBM Common Licensing information disclosure
IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy. IBM X-Force ID: 273337...
CVE-2023-50306
CVE-2023-50306: IBM Common Licensing username enumeration (local) Affected product: IBM Engineering Requirements Management DOORS family (DOORS/DOORS Web Access) on versions 9.7.2.7 and related DOORS Web Access/DWA, with root cause described as an observable response discrepancy that lets a local...
PT-2024-12626 · Domino · Domino
Name of the Vulnerable Software and Affected Versions: Domino affected versions not specified Description: The issue is related to the use of a cryptographically weak hash algorithm to secure internet passwords stored in Person documents in the Domino Directory. This weakness could allow attacker...
