22 matches found
EUVD-2021-16342
Malware in sbrugna...
EUVD-2020-25831
Malware in sbrugna...
EUVD-2020-25835
Malware in sbrugna...
CVE-2021-29868
IBM i2 iBase 8.9.13 and 9.0.0 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 206213...
CVE-2021-29868: Insufficient Session Expiration
IBM i2 iBase 8.9.13 and 9.0.0 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 206213...
PT-2021-18527
Name of the Vulnerable Software and Affected Versions IBM i2 iBase versions 8.9.13 through 9.0.0 Description The issue allows a local attacker to obtain sensitive information due to insufficient session expiration. Recommendations For versions 8.9.13 and 9.0.0, consider implementing additional...
Security Bulletin: Insufficient session expiration in IBM i2 iBase
Summary IBM i2 iBase provides insufficient login sessioon timeouts Vulnerability Details CVEID: CVE-2021-29868 DESCRIPTION: IBM i2 iBase could allow a local attacker to obtain sensitive information due to insufficient session expiration. CVSS Base score: 4 CVSS Temporal Score: See:...
IBM i2 iBase Code Execution Vulnerability
IBM i2 iBase is a data analysis application from IBM Corporation. The software provides flexible data acquisition and visualization tools for data analysis. i2 iBase has a code execution vulnerability that can be exploited by attackers to execute arbitrary code on the system...
Code injection
IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 184984...
CVE-2020-4623: Uncontrolled Search Path Element
IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 184984...
PT-2021-12143
Name of the Vulnerable Software and Affected Versions IBM i2 iBase version 8.9.13 Description The issue allows a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit thi...
Security Bulletin: IBM i2 iBase vulnerable to DLL highjacking (CVE-2020-4623)
Summary i2 iBase is vulnerable to DLL highjacking attacks. Vulnerability Details CVEID: CVE-2020-4623 DESCRIPTION: IBM i2 iBase could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, ...
Security Bulletin: IBM I2 iBase is vulnerable to unrestricted file upload (CVE-2020-4588)
Summary iBase file uploads does not restrict the file type to be uploaded. This issue has been addressed. Vulnerability Details CVEID: CVE-2020-4588 DESCRIPTION: IBM i2 iBase could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result i...
Security Bulletin: Sensitive information vulnerability affects IBM i2 iBase (CVE-2020-4584)
Summary The sensitive information vulnerability was addressed in IBM i2 iBase. Vulnerability Details CVEID: CVE-2020-4584 DESCRIPTION: IBM i2 iBase could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information...
CVE-2020-4584
IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184574...
CVE-2020-4584
IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184574...
CVE-2020-4588
IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 184579...
PT-2020-18148
Name of the Vulnerable Software and Affected Versions IBM i2 iBase version 8.9.13 Description The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2020-4584: Generation of Error Message Containing Sensitive Information
IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184574...
CVE-2020-4588: Unrestricted Upload of File with Dangerous Type
IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 184579...