Lucene search
+L

7436 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/02/10 1:02 p.m.15 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Werkzeug-2.3.4-py3-none-any.whl CVE-2023-46136

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Werkzeug-2.3.4-py3-none-any.whl CVE-2023-46136. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-46136 DESCRIPTION: Pallets Werkzeug is vulnerable to a denial o...

8CVSS8.4AI score0.03397EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/10 12:59 p.m.9 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to nanoid-3.3.7.tgz CVE-2024-55565

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to nanoid-3.3.7.tgz CVE-2024-55565. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-55565 DESCRIPTION: nanoid aka Nano ID before 5.0.9 mishandles non-integer...

4.3CVSS4.6AI score0.00679EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/10 12:59 p.m.11 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to cross-spawn-7.0.3.tgz CVE-2024-21538

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to cross-spawn-7.0.3.tgz CVE-2024-21538. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn before 7.0.5 are...

8.7CVSS7.4AI score0.00868EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/10 12:58 p.m.17 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to cookie-0.5.0.tgz CVE-2024-47764

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to cookie-0.5.0.tgz CVE-2024-47764. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-47764 DESCRIPTION: jshttp cookie could allow a remote attacker to bypass...

6.9CVSS6AI score0.00744EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/10 12:58 p.m.15 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to cookie-0.4.0.tgz CVE-2024-47764

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to cookie-0.4.0.tgz CVE-2024-47764. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-47764 DESCRIPTION: jshttp cookie could allow a remote attacker to bypass...

6.9CVSS6.1AI score0.00744EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/10 12:57 p.m.6 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to setuptools-68.0.0-py3-none-any.whl CVE-2024-6345

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to setuptools-68.0.0-py3-none-any.whl CVE-2024-6345. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: pypa/setuptools could allow a remote attack...

8.8CVSS7.4AI score0.01939EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.25 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-50003)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50003 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while...

5.5CVSS6AI score0.0022EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.10 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-46759)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46759 advisory. - In the Linux kernel, the following vulnerability has been resolved: hwmon: adc128d818 Fix underflows seen wh...

7.8CVSS5.8AI score0.00282EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/09 10:18 a.m.9 views

CVE-2025-25088

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor wp-keyword-monitor allows Cross Site Request Forgery.This issue affects WP Keyword Monitor: from n/a through = 1.0.5...

7.1CVSS7.2AI score0.00152EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/07 10:15 a.m.14 views

CVE-2025-25088

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor wp-keyword-monitor allows Cross Site Request Forgery.This issue affects WP Keyword Monitor: from n/a through = 1.0.5...

7.1CVSS0.00152EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/07 10:11 a.m.50 views

CVE-2025-25088

CVE-2025-25088 corresponds to a Cross-Site Request Forgery to Stored XSS vulnerability in the WordPress plugin WP Keyword Monitor (affected versions: up to 1.0.5). The connected sources describe the issue as CSRF that allows stored XSS, but do not provide concrete details about specific vulnerabl...

7.1CVSS7.2AI score0.00152EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/07 10:11 a.m.4 views

CVE-2025-25088 WordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor allows Stored XSS. This issue affects WP Keyword Monitor: from n/a through 1.0.5...

7.1CVSS6.8AI score0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/07 10:11 a.m.25 views

CVE-2025-25088 WordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor wp-keyword-monitor allows Cross Site Request Forgery.This issue affects WP Keyword Monitor: from n/a through = 1.0.5...

7.1CVSS0.00152EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/07 12:00 a.m.6 views

WordPress plugin WP Keyword Monitor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.6AI score0.00152EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 4:27 a.m.29 views

CVE-2021-31474

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results...

10CVSS7.3AI score0.94431EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:32 a.m.10 views

CVE-2025-24663

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through = 3.9.25...

7.6CVSS7.3AI score0.00585EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:18 a.m.12 views

CVE-2025-0626

The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to...

7.7CVSS7.7AI score0.01158EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.10 views

Vulnerability of the Monitor component of the IBM Maximo Application Suite, a cloud-based artificial intelligence-driven enterprise asset management platform. It is possible to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the Monitor component in the IBM Maximo Application Suite for corporate asset management platform exists due to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

6.5CVSS5.9AI score0.00359EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.11 views

Vulnerability of the Monitor component of the IBM Maximo Application Suite, a cloud-based artificial intelligence-driven enterprise asset management platform. It is possible to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker operating remotely t...

6.4CVSS6AI score0.00258EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.12 views

Vulnerability of the Monitor component of the IBM Maximo Application Suite, a cloud-based artificial intelligence-driven corporate asset management platform, allowing unauthorized access to protected information

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to insufficient protection of sensitive data in the source code. Exploiting this vulnerability could allow an attacker operating...

5.3CVSS5.5AI score0.00306EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder