1069 matches found
CVE-2016-9007
IBM UrbanCode Deploy contains a vulnerability (CVE-2016-9007) where secure property values can be leaked via process execution log output, potentially exposing sensitive data to unauthorized users. Affected versions include IBM UrbanCode Deploy 6.1.x (various subversions) and 6.2.x (up to 6.2.2.1...
CVE-2017-1547
CVE-2017-1547 affects IBM Emptoris Services Procurement. The vulnerability enables username enumeration through the forgot-password flow, allowing an attacker to determine valid usernames and potentially brute-force credentials. This concerns IBM Emptoris Services Procurement 10.0.0.x. Root cause...
CVE-2012-0424
Technical details for CVE-2012-0424 are not provided in the supplied documents; the Initial Description is a placeholder. Monitor for updates from the sources.
CVE-2021-26976
Technical details for CVE-2021-26976 are not publicly available in the provided documents. Monitoring for updates is advised; no affected products, impact, or remediation are described in the supplied materials.
CVE-2022-24087
CVE-2022-24087 is the follow-on to CVE-2022-24086, an Improper Input Validation vulnerability in Adobe Commerce/Magento Open Source that enables pre-authenticated remote code execution. Connected sources indicate it affects Magento Open Source/Adobe Commerce 2.3.3-p1–2.3.7-p2 and 2.4.0–2.4.3-p1, ...
CVE-2099-1234
Technical details for CVE-2099-1234 are not publicly available in the provided documents. Monitor for updates; no affected products, vectors, or remediation information can be stated at this time.
CVE-2016-79267926
tcpdump on IBM AIX is affected by CVE-2016-7926 (Ethernet parser). The advisory states a buffer overflow due to improper bounds checking in Ethernet parser (print-ether.c:ethertype_print()) that could allow remote code execution or a crash. Affected AIX versions/filesets include bos.net.tcp.serve...
CVE-2021-1000007
The connected advisories describe a DoS: parsing duration strings with very large exponents in the Rust parse_duration crate (via parse_duration::parse) can exhaust CPU and memory, enabling an attacker to cause high resource usage. The issue is caused by using BigInt with exponentiation in the pa...
CVE-2010-1569
Technical details for CVE-2010-1569 are not publicly available in the provided documents; monitor for updates as information may be released in the future.
CVE-2020-24597
CVE-2020-24597: Joomla core contains a directory traversal in com_media that allows access to files outside the webroot. Public sources list affected versions as Joomla core up to 3.9.24 (Nessus plugin 112581) and up to 3.9.20 (OpenVAS entry). Root cause is lack of input validation for com_media ...
CVE-2020-6913
HP Sure Sense driver may have a vulnerability that could allow Unauthorized Code Execution, per HP PSRT bulletin HPSBHF03663 rev. 1. Details are limited; bulletin may be updated as new information or SoftPaqs become available. HP recommends keeping firmware/software up to date. The connected docu...
CVE-2014-4704
CVE-2014-4704 is associated with a DoS vulnerability in Huawei devices (Campus Switch, AR, SRG, WLAN). The flaw in the RADIUS component allows a remote, authenticated attacker to send malformed RADIUS packets to trigger device restarts. Affected products and exact firmware versions are described ...
CVE-2018-11817
CVE-2018-11817 is listed as a critical issue in Qualcomm DSP_Services within the Android 2019-03 bulletin context. The connected document confirms the CVE is associated with Qualcomm DSP_Services (as part of Qualcomm components) and is rated Critical, but does not provide further technical detail...
CVE-2018-36464
Technical details for CVE-2018-36464 are not provided in the available documents. The Connected Huawei advisory discusses L1TF-related CVEs (e.g., CVE-2018-3646) but does not reveal specifics for 2018-36464. Monitor for updates.
CVE-2021-43014
Adobe Connect is affected by CSRF leading to arbitrary file system write (CVE-2021-43014) as described in APSB21-112. The vulnerability is tied to Adobe Connect versions prior to the fixed release (vendor fix listed in APSB21-112). Exploitation context is a CSRF flaw without token authentication ...
CVE-2013-3364
CVE-2013-3364 aligns with a GitHub advisory and OSV entry describing unauthenticated remote command injection in the ep_imageconvert plugin for Etherpad Lite. The vulnerability affects ep_imageconvert
CVE-2021-11193
Technical details for CVE-2021-11193 are not publicly available in the provided documents. Monitor for updates.
Is Firefox OK?
Mozilla’s privacy-heavy browser is flatlining. What it does next is crucial for the future of the web...
CVE-2021-39676
In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...