Lucene search
+L

8742 matches found

NVD
NVD
•added 2019/08/20 8:15 p.m.•39 views

CVE-2019-4338

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

7.5CVSS7.2AI score0.01726EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/20 8:15 p.m.•36 views

Design/Logic Flaw

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

5CVSS7.1AI score0.01726EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/08/20 7:30 p.m.•62 views

CVE-2019-4340

CVE-2019-4340 affects IBM Security Guardium Big Data Intelligence (SonarG) v4.0. It is an XML External Entity (XXE) vulnerability in XML processing that can allow a remote attacker to disclose sensitive data or exhaust memory resources. Affected product/version: Guardium Big Data Intelligence 4.0...

8.2CVSS8AI score0.02427EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/08/20 7:30 p.m.•47 views

CVE-2019-4338

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

7.5CVSS7.2AI score0.01726EPSS
SaveExploits0References2
NVD
NVD
•added 2019/08/20 7:15 p.m.•32 views

CVE-2019-4310

IBM Security Guardium Big Data Intelligence 4.0 SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036...

7.5CVSS7.3AI score0.02204EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/08/20 7:15 p.m.•17 views

CVE-2019-4310

IBM Security Guardium Big Data Intelligence 4.0 SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036...

7.5CVSS7.2AI score0.02204EPSS
SaveExploits0References2
CVE
CVE
•added 2019/08/20 6:25 p.m.•62 views

CVE-2019-4310

CVE-2019-4310 affects IBM Security Guardium Big Data Intelligence (SonarG) 4.0. The issue is an inadequate account lockout setting that could allow a remote attacker to brute-force credentials over the network. Components/versions explicitly named: Guardium Big Data Intelligence 4.0 (SonarG). Imp...

7.5CVSS7.2AI score0.02204EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2019/08/20 12:00 a.m.•16 views

WordPress wp-business-intelligence-lite plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-business-intelligence-lite is a plugin used to create responsive charts. A SQL injection vulnerability exists in the WordPress...

9.8CVSS8AI score0.01848EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•12 views

CVE-2019-4340: Improper Restriction of XML External Entity Reference

IBM Security Guardium Big Data Intelligence 4.0 SonarG is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 161419...

8.2CVSS5.8AI score0.02427EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•11 views

CVE-2019-4338: Allocation of Resources Without Limits or Throttling

IBM Security Guardium Big Data Intelligence 4.0 SonarG does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417...

7.5CVSS5.8AI score0.01726EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•14 views

CVE-2019-4310: Improper Restriction of Excessive Authentication Attempts

IBM Security Guardium Big Data Intelligence 4.0 SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036...

7.5CVSS5.9AI score0.02204EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/08/20 12:00 a.m.•16 views

PT-2019-17031 · Ibm · Ibm Security Guardium Big Data Intelligence

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Big Data Intelligence version 4.0 SonarG Description: The issue is related to an inadequate account lockout setting, which could allow a remote attacker to brute force account credentials. Recommendations: For IBM Securi...

7.5CVSS7.3AI score0.02204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/08/20 12:00 a.m.•19 views

PT-2019-17040 · Ibm · Ibm Security Guardium Big Data Intelligence

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Big Data Intelligence version 4.0 SonarG Description: The issue is related to improper restriction of resource requests, allowing an actor to consume more resources than intended. Recommendations: For IBM Security Guardi...

7.5CVSS7.3AI score0.01726EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
•added 2019/08/19 3:00 p.m.•112 views

How much personalization is too much?

This story originally ran in The Parallax on January 25, 2019, and was written by Dan Tynan. In 2012, when Target used data analytics to identify customers who were expecting a baby, then mailed them coupons for maternity clothing and nursery furniture, it inadvertently revealed a teenage girl’s...

6.6AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2019/08/16 6:10 p.m.•23 views

Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a XML External Entity vulnerability

Summary IBM Security Guardium is aware of the following vulnerability Vulnerability Details CVEID: CVE-2019-4340 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit...

8.2CVSS1.5AI score0.02427EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2019/08/16 6:08 p.m.•20 views

Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a Improper Restriction of Excessive Authentication Attempts vulnerability

Summary IBM Security Guardium is aware of the following vulnerability Vulnerability Details CVEID: CVE-2019-4310 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. CVSS...

7.5CVSS1.7AI score0.02204EPSS
SaveExploits0Affected Software1
Prion
Prion
•added 2019/08/16 2:15 p.m.•23 views

Sql injection

The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...

7.5CVSS8.4AI score0.01848EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/08/16 1:40 p.m.•101 views

CVE-2015-9326

CVE-2015-9326 affects the WordPress plugin wp-business-intelligence-lite prior to version 1.6.3. The vulnerability is a SQL injection in the plugin that could allow an attacker to execute arbitrary SQL commands, with impact described as high (NVD CVSS2: 7.5, high; CVSS3: 9.8, critical). Affected ...

9.8CVSS9.9AI score0.01848EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2019/08/16 1:40 p.m.•8 views

CVE-2015-9326

The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...

9.8CVSS0.01848EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/16 12:00 a.m.•10 views

CVE-2015-9326: Improper Neutralization of Special Elements used in an SQL Command

The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...

9.8CVSS5.8AI score0.01848EPSS
SaveExploits0References2
Rows per page
Query Builder