PT-2023-20043

Name of the Vulnerable Software and Affected Versions Allegro Tech BigFlow versions prior to 1.6.0 Description The issue is related to Missing SSL Certificate Validation. This means that the software may not properly verify the identity of the server it is connecting to, potentially allowing for...

Pegasystem PEGA Platform 数据伪造问题漏洞

Pegasystem PEGA Platform is a suite of application development platforms from the US-based Pegasystem. The platform is used to develop applications such as BPM Business Process Management, case management, real-time decision making, and CRM Customer Relationship Management. A security vulnerabili...

PT-2023-20658 · Pegasystems +1 · Synchronization Engine

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A man in the middle can redirect traffic to a malicious server in a compromised configuration. Recommendations: At the moment, there is no information about a newer version that...

CVE-2023-26467

A man in the middle can redirect traffic to a malicious server in a compromised configuration...

CVE-2023-26467

Technical details about CVE-2023-26467 are not publicly available in the provided documents; monitor for updates.

CVE-2023-26467: Insufficient Verification of Data Authenticity

A man in the middle can redirect traffic to a malicious server in a compromised configuration...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information Server

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM InfoSphere Information Server. IBM InfoSphere Information Server has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6306 DESCRIPTION: OpenSSL is...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libgit2 (SUSE-SU-2023:1788-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1788-1 advisory. - CVE-2023-22742: Verify ssh remote host keys bsc1207364 Tenable has extracted the preceding description...

CVE-2020-10134

A flaw was discovered in the Bluetooth protocol affecting the Bluetooth LE Secure Connections pairing and the BR/EDR Secure Simple Pairing. An attacker with physical access to the Bluetooth connection could perform a man-in-the-middle attack between two devices using the Numeric Comparison and...

SUSE-SU-2023:1776-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2023-26604: Fixed a privilege escalation via the less pager. bsc1208958 - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suiddumpable kernel setting bsc1205000. - CVE-2022-3821: Fixed buffer overrun in formattimespan...

CVE-2022-46021

X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage...

CVE-2022-46021

X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage...

Sql injection

X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a man-in-the-middle attack in cURL libcurl (CVE-2022-32208)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a man-in-the-middle attack in cURL libcurl caused by a flaw in the handling of message verification failures. CVE-2022-32208. cURL libcurl is included as part of the Base OS used by our service images. Please...

X-Man SQL注入漏洞

X-Man is a backend system based on ThinkPHP framework developed by S1xGod individual developers. A security vulnerability exists in X-Man version 1.0. An attacker exploited the vulnerability to perform SQL injection attacks...

CVE-2022-46021

X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage...

CVE-2022-46021

X-Man 1.0 is affected by a SQL injection vulnerability (CVE-2022-46021) that can lead to data leakage. The CVE has a base score of 7.5 (HIGH) with network access, no authentication, and no user interaction required, per NVD/CVE data. Connected sources indicate the issue is tied to X-Man 1.0, and ...

CVE-2022-46021

X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage...

CVE-2022-46021: Improper Neutralization of Special Elements used in an SQL Command

X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage...

PT-2023-14807 · Xman · Xman

Name of the Vulnerable Software and Affected Versions: X-Man version 1.0 Description: The issue is related to a SQL injection vulnerability, which can cause data leakage. Recommendations: For X-Man version 1.0, consider applying a patch or fix to resolve the SQL injection vulnerability. As a...