CVE-2022-224485

CVE-2022-224485 impacts IBM Spectrum Protect Server. Affected versions: 8.1.0.000 through 8.1.14.000. The issue originates from bypassing the authentication attempt rate limit, enabling an attacker to obtain the administrator password. No exploit details or explicit mitigation are provided in the...

CVE-2102-3325

Technical details for CVE-2102-3325 are not publicly available in the provided documents. Monitor for future updates.

CVE-2021-17571

IBM’s bulletin confirms that Apache Log4j vulnerabilities affect IBM App Connect Enterprise (ACE) v11/v12 and IBM Integration Bus v10, with CVE-2019-17571 described as enabling remote code execution via improper deserialization in SocketServer. Affected range includes ACE v12.0.1.0–v12.0.3.0, ACE...

CVE-2022-232475

Technical details for CVE-2022-232475 are not publicly available in the provided documents; monitor for updates.

CVE-2022-43471

The CVE entry CVE-2022-43471 in this context is supported by a Patchstack report for WordPress WP Bootstrap Gallery plugin (versions <= 1.1) describing a Broken Access Control vulnerability. Affected component: WP Bootstrap Gallery plugin. Root cause: Broken Access Control in versions

CVE-2022-44705

Technical details for CVE-2022-44705 are not publicly available in the provided documents. There is no information on affected products, impact, vectors, or remediation. Monitor for future updates.

CVE-2022-24476

CVE-2022-24476 affects IBM WebSphere Application Server Liberty (and Open Liberty) within IBM Watson Assistant for IBM Cloud Pak for Data, version ranges 17.0.0.3–22.0.0.7 and Open Liberty with authenticated identity spoofing via a specially crafted request. IBM Clover: vulnerable products includ...

CVE-2105-2342

VMware vCenter/ESXi advisory coverage CVE-2015-2342 and CVE-2015-5177 describing two issues: (1) a double-free in OpenSLP's SLPDProcessMessage() on ESXi that may allow unauthenticated remote code execution; (2) a vulnerable vCenter Server JMX RMI service that can permit remote code execution. The...

CVE-2929-2773

Summary: IBM DataQuant for z/OS version 2.1 is affected by CVE-2020-2773 (referenced in the IBM bulletin as CVE-2929-2773 in this entry). The vulnerability is described as an unspecified issue in the Java SE Security component that could allow an unauthenticated attacker to cause a denial of serv...

CVE-2022-16126

Technical details for CVE-2022-16126 are not publicly available in the provided documents. No affected products, impact, or remediation are specified. Monitor for updates from official sources.

Grafana -- Privilege escalation

Grafana Labs reports: Grafana admins can invite other members to the organization they are an admin for. When admins add members to the organization, non existing users get an email invite, existing members are added directly to the organization. When an invite link is sent, it allows users to si...

Brazilian Police Arrest Suspected Member of Lapsus$ Hacking Group

The Federal Police of Brazil on Wednesday announced it had arrested an individual for purported links to the notorious LAPSUS$ extortionist gang. The arrest was made as part of a new law enforcement effort, dubbed Operation Dark Cloud, that was launched in August 2022, the agency noted. Not much ...

CVE-2021-41624

CVE-2021-41624 is associated with a memory-leak DoS in F5 BIG-IP. The CNNVD entry describes F5 BIG-IP as an application delivery platform and notes a memory leak vulnerability that triggers denial of service. The provided documents do not specify affected versions, vulnerable components, exploit ...

delfosclinica.com.br Cross Site Scripting vulnerability OBB-2999517

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

curiousscience.com Cross Site Scripting vulnerability OBB-2997187

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Budworm Hackers Resurface with New Espionage Attacks Aimed at U.S. Organization

An advanced persistent threat APT actor known as Budworm targeted a U.S.-based entity for the first time in more than six years, according to latest research. The attack was aimed at an unnamed U.S. state legislature, the Symantec Threat Hunter team, part of Broadcom Software, said in a report...

CVE-2022-41647

WordPress Optinly plugin (versions

CVE-2022-41295

CVE-2022-41295 affects IBM Robotic Process Automation products. IBM Robotic Process Automation Client may be vulnerable to sensitive data being stored in temporary managed memory, enabling exposure of data in memory during operation. Affected products/versions: IBM Robotic Process Automation for ...

CVE-2020-35282

The connected IBM advisories confirm CVE-2020-35282 affects IBM WebSphere Application Server (WAS) when shipped with IBM Operations Analytics Predictive Insights. Affected: WAS 8.0, 8.5, 9.0 as part of Predictive Insights; vulnerability type: Server-Side Request Forgery (and related spoofing/remo...

serpas.org Cross Site Scripting vulnerability OBB-2990578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...