CVE-2018-1681

CVE-2018-1681 affects IBM Data Science Experience Local. The IBM security bulletin confirms a vulnerability that could disclose highly sensitive information to a local unprivileged user. Affected versions are IBM Data Science Experience Local 1.1.0, 1.1.1, 1.1.2, 1.1.3, and 1.2.0. The remediation...

CVE-2018-1919

IBM Security Bulletin for CVE-2018-1919 details a local privilege-escalation in the SUID handling of the egosh binary in IBM Platform Symphony and IBM Spectrum Symphony. When starting a host with egosh ego start, the egosh binary is run with root SUID, creating a potential path for a non-root use...

CVE-2018-1855

CVE-2018-1855 is an IBM Spectrum Protect Operations Center (formerly Tivoli Storage Manager Operations Center) cross-site scripting vulnerability. Versions affected: 8.1.0.000–8.1.6.100 and 7.1.0.000–7.1.9.100. The flaw allows a remote attacker to inject arbitrary JavaScript into the Web UI, pote...

CVE-2018-1854

IBM Spectrum Protect Operations Center (formerly Tivoli Storage Manager Operations Center) is affected by CVE-2018-1854: a cross-site scripting vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. Affected versions are 8.1.0.000–8.1.6.100 and 7.1.0.000–7.1...

CVE-2017-1579

CVE-2017-1579 is addressed in IBM DOORS Next Generation (DNG/RRC). The IBM Security Bulletin reports a cross-site scripting vulnerability in the Web UI of Rational DOORS Next Generation, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted sessi...

CVE-2012-1359

CVE-2012-1359, as reserved, has a connected IBM advisory detailing multiple security vulnerabilities in IBM JRE 7.0 SR2 or earlier (and non-IBM Java 7.0 when used with Rational Functional Tester). The bulletin lists numerous CVEs (e.g., CVE-2012-3159 and related issues across JRE components such ...

CVE-2018-1385

CVE-2018-1385 is referenced in IBM API Connect security bulletin: it describes use of weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Affected IBM API Connect versions are 5.0.0.0–5.0.6.5, 5.0.7.0–5.0.7.2, and 5.0.8.0–5.0.8.1. Re...

CVE-2017-1634

IBM Financial Transaction Manager (FTM) for ACH Services and FTM for Corporate Payment Services are affected by CVE-2017-1634, a cross-site scripting (XSS) vulnerability that allows an attacker to inject arbitrary JavaScript into the Web UI, potentially exposing credentials within a trusted sessi...

CVE-2018-1365

Summary: CVE-2018-1365 affects IBM Cloud Event Management and IBM Alert Notification when viewed in Internet Explorer. The vulnerability allows an attacker to hijack a victim’s click actions by loading the affected console in an iframe not belonging to the system, potentially enabling further att...

CVE-2017-1797

IBM Kenexa LCMS Premier on Cloud is affected by a SQL injection vulnerability tracked as CVE-2017-1797. A remote attacker could send specially crafted SQL statements to view, add, modify, or delete data in the back-end database. Affected versions include 9.3 through 11.1; remediation is to upgrad...

CVE-2017-16032

CVE-2017-16032 is a DoS vulnerability in the brace-expansion component used by IBM MobileFirst Platform Foundation 8.x.x. The IBM bulletin lists brace-expansion as vulnerable to regular expression denial of service (ReDoS) via crafted arguments, with affected versions tied to IBM MobileFirst Plat...

CVE-2022-20363

CVE-2022-20363 appears in the Chromecast July 2022 bulletin under AMLogic with component U-Boot, classified as Elevation of Privilege (EoP) and rated High severity. The bulletin notes this family of issues is addressed by updating Chromecast devices to the 2022-02-05 patch level or newer. The vul...

CVE-2019-10521

CVE-2019-10521 is listed in the Pixel September 2020 bulletin under Qualcomm components, classified as N/A type with Kernel as the affected subcomponent and a Moderate severity. The entry references QC-CR#2419292 (Android bug/QC reference). The provided Connected document does not include a vulne...

CVE-2019-10519

CVE-2019-10519 is listed under Qualcomm components in Google's Pixel September 2020 security bulletin as a Moderate-severity, N/A-type issue affecting the Display/graphics component. The bulletin does not provide a detailed root cause or exploit information. There is no explicit patch description...

CVE-2021-0950

Android 12 security release notes list CVE-2021-0950 under System as a Elevation of Privilege (EoP) with Moderate impact. The entry confirms this CVE affects Android 12 components addressed in the Android 12 release, and notes that patches will be released to the Android Open Source Project (AOSP...

CVE-2021-0886

CVE-2021-0886 is listed in the Android 12 security release notes under the System component as a DoS vulnerability (Severity: Moderate). The Android bulletin does not provide exploit details or specific mitigations for this CVE. It notes that issues addressed in Android 12 are protected if device...

CVE-2021-0866

CVE-2021-0866 is listed under Android 12 Framework with type Information Disclosure (ID) and Moderate severity, referenced by Android bug ID A-184658476. The provided connected document does not include details on the root cause, affected subcomponent, impact scope, exploitability, or a fix. No r...

CVE-2021-0862

CVE-2021-0862 is listed under Android 12 Framework issues with the type Elevation of Privilege (EoP) and High severity. The connected Android 12 vulnerability details document confirms the CVE entry exists and is part of the Android 12 release notes, but there are no provided specifics on the aff...

CVE-2021-0861

CVE-2021-0861 appears in the Android 12 security bulletin as part of the System vulnerabilities, bug ID A-131355925, classified as Information Disclosure (ID) with High severity. The Android 12 release notes indicate these issues are addressed in Android 12 patches, with devices protected at a se...

CVE-2021-0858

CVE-2021-0858 is listed in the Android 12 security release notes, under Framework with Type ID and High severity. The document does not provide concrete details on root cause, affected subcomponents, exploits, or specific fixes for this CVE. It notes that issues fixed in Android 12 are addressed ...