CVE-2022-38386

IBM Cloud Pak for Security CP4S 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 2337...

EUVD-2016-4116

Malware in sbrugna...

EUVD-2020-26217

Malware in sbrugna...

EUVD-2021-25415

Malware in sbrugna...

EUVD-2019-14274

Malware in sbrugna...

EUVD-2016-6869

Malware in sbrugna...

EUVD-2018-12033

Malware in sbrugna...

EUVD-2016-7050

Malware in sbrugna...

EUVD-2017-10245

Malware in sbrugna...

EUVD-2016-4125

Malware in sbrugna...

EUVD-2016-9791

Malware in sbrugna...

EUVD-2024-46234

Malicious code in bioql PyPI...

EUVD-2023-39880

Malicious code in bioql PyPI...

EUVD-2022-38527

Malicious code in bioql PyPI...

EUVD-2024-36410

Malicious code in bioql PyPI...

CVE-2024-43190 IBM Engineering Requirements Management DOORS weak authentication

IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques...

CVE-2024-52366

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle...

CVE-2024-37068

IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information using man in the middle techniques...

CVE-2024-41757

IBM Concert Software 1.0.0 and 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2024-49820

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man i...