CVE-2011-2036

Technical details for CVE-2011-2036 are not publicly available in the provided documents. Monitor for updates.

CVE-2012-0422

CVE-2012-0422 is acknowledged within IBM advisories as part of the Oracle Java SDK-related fixes shipped with WebSphere-related products. The connected IBM pages describe remediation for other CVEs (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169) and list affected WebSphere SDK versions (8.5.x, 8.0....

CVE-2020-22348

IBM Security Bulletin describes CVE-2020-22348 as part of a set of vulnerabilities in IBM Spectrum Protect Operations Center (8.1.0.000–8.1.13.x) including reverse tabnabbing and CSRF. Affected versions can be remediated by upgrading to 8.1.14 on AIX/Linux/Windows. CVSS scores are provided in the...

CVE-2022-35550

The IBM Security Bulletin for CVE-2022-35550 (linked to CVE-2021-35550 in the bulletin) indicates an information-leak vulnerability in IBM Cloud Pak for Multicloud Management Monitoring where Java SE JSSE usage by multiple components could allow an unauthenticated attacker to obtain sensitive inf...

CVE-2022-36371

CVE-2022-36371 is linked to WordPress My Calendar plugin versions

HICOS 缓冲区错误漏洞

HICOS is a tool from China's MOICA that provides IC card credentials for registration into an operating system. A buffer error vulnerability exists in HICOS due to an insufficiently validated parameter length in its citizen authentication component that could be exploited by an unauthenticated...

etswales.org.uk Cross Site Scripting vulnerability OBB-2822135

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hive Pro Welcomes Pierre Noel as New Chief Information Security Officer

New CISO to Support Growth Milpitas, California, July 28, 2022 -- Hive Pro, a cyber security company specializing in Cyber Threat Exposure Management, has appointed Pierre Noel as its new Chief Information Security Officer CISO. He has been hired with the vision of supporting growth in the compan...

GitLab CE/EE 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE that stems from allowing projec...

CVE-2019-14435

According to connected Veracode data, the vulnerability affects rancher/rancher and is categorized as Information Disclosure caused by missing or improper Content-Security-Policy header values. The server response can leak confidential information, including Cookie values. There is no version or ...

CVE-2019-18617

The connected Veracode entry (VERACODE:22557) describes a vulnerability in github.com/hashicorp/vault where information disclosure occurs after mount filter creation on an upstream Performance secondary cluster. The Disaster Recovery (DR) secondary clusters fail to remove replicated secrets and r...

CVE-2019-16742

CVE-2019-16742 is referenced in connected documents related to hashicorp Nomad: Veracode notes an authorization bypass where allocation endpoints improperly perform ACL checks on the requested namespace, enabling potential unauthorized access. No explicit patch/version details or remediation step...

CVE-2019-17591

Bolt CMS 3.x contains a CSRF vulnerability (CVE-2019-17591) demonstrated by public exploits targeting Bolt CMS 3.6.10. The exploit describes an authenticated user CSRF payload that posts to /index.php/async/folder/create to perform actions on behalf of the user. Connected sources show CSRF risk i...

CVE-2019-14803

CVE-2019-14803 is connected to a privilege-escalation issue in HashiCorp Nomad via the exec driver, caused by improper setuid permissions. The Veracode entry confirms Nomad as affected and notes the root cause as the exec driver having improper setuid permissions. No exploit/vector details are pr...

CVE-2019-14803

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2019-15928

HashiCorp Nomad is reported vulnerable to privilege escalation via the raw_exec driver being invoked even when disabled on the client, allowing an authorized user to run a task with higher privileges. The exact affected versions, root cause details, and remediation are not specified in the provid...

CVE-2021-31603

CVE-2021-31603 is a reserved candidate in the initial document; connected Veracode data indicates a vulnerability in croc where a remote attacker can intercept and decrypt all files sent via croc, constituting information disclosure. No product version, vector details, or remediation are provided...

CVE-2020-17455

Veracode reports CVE-2020-17455 as a remote code execution vulnerability in vault:edge, arising from a buffer overflow in the libntlm NTLM library. The flaw occurs in buildSmbNtlmAuthRequest_userlen() when input length is not properly validated, potentially allowing a crafted request to crash the...

Racoon Stealer is Back — How to Protect Your Organization

The Racoon Stealer malware as a service platform gained notoriety several years ago for its ability to extract data that is stored within a Web browser. This data initially included passwords and cookies, which sometimes allow a recognized device to be authenticated without a password being...

CVE-2022-31168

Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a member of an organization could craft an API call that grants organization administrator privileges to one of their bots. The vulnerability is fixed in Zulip Server 5.5. Members who...