Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.

Summary IBM Application Performance Management is vulnerable to denial of service, remote code execution, information disclosures and other vulnerabilities due to bundled product IBM ® Db2. This bulletin identifies the steps to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-318...

CVE-2021-22918

CVE-2021-22918 affects Node.js releases prior to 16.4.1, 14.17.2 and 12.22.2 due to an out-of-bounds read in libuv’s uv__idna_toascii() used during DNS lookups. The flaw allows information disclosure or crashes when a crafted domain is processed via uv_getaddrinfo(). The root cause is reading bey...

Concrete 5.5.21 XSS / CSRF / Path Disclosure

====================================================================================================================== Vulnerable software: Concrete CMS 5.5.21 Downloaded from: http://citylan.dl.sourceforge.net/project/concretecms/concrete5/5.5.2.1/concrete5.5.2.1.zip...