EUVD-2020-26027

Malware in sbrugna...

EUVD-2020-26021

Malware in sbrugna...

EUVD-2017-10122

Malware in sbrugna...

EUVD-2016-10763

Malware in sbrugna...

EUVD-2020-26026

Malware in sbrugna...

EUVD-2020-26022

Malware in sbrugna...

EUVD-2018-12250

Malware in sbrugna...

EUVD-2022-27463

Malicious code in bioql PyPI...

CVE-2022-22317: Insufficient Session Expiration

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281...

PT-2022-15357

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 8.0.0 through 8.0.1 Description The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. Recommendations For versions 8.0...

PT-2022-15356

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 8.0.0 through 8.0.1 Description The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. Recommendations For versions 8.0...

CVE-2022-22318: Insufficient Session Expiration

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

PT-2022-10871

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 7.0.11 through 8.0.1 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within...

CVE-2021-39068: Improper Neutralization of Input During Web Page Generation

IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

PT-2021-12245

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 7.0.9 through 7.0.11 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery...

CVE-2020-4942: Cross-Site Request Forgery (CSRF)

IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942...

CVE-2020-4773

A cross-site request forgery CSRF vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted actions on the web application while they are currently authenticated. This applies to a single server class only, with no...

CVE-2020-4774

An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information su...

Input validation

An improper input validation before calling java readLine method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159...

Design/Logic Flaw

IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...