CVE-2021-14355

CVE-2021-14355 relates to Spice Server. Public sources describe multiple vulnerabilities in Spice Server prior to 0.15.0, with the CNNVD entry noting a remote code execution risk and Gentoo GLSA detailing a DoS-related issue in older Spice versions (before 0.14.92) and recommending upgrading to n...

CVE-2022-224485

CVE-2022-224485 impacts IBM Spectrum Protect Server. Affected versions: 8.1.0.000 through 8.1.14.000. The issue originates from bypassing the authentication attempt rate limit, enabling an attacker to obtain the administrator password. No exploit details or explicit mitigation are provided in the...

CVE-2021-045960

IBM Robotic Process Automation for Cloud Pak 21.0.2 is affected by multiple vulnerabilities tied to Expat/libexpat and related components, including CVE-2021-045960. The bulletin lists Expat-derived CVEs impacting the base container images and the .NET 6 runtime, with various CVSS details. Remedi...

CVE-2022-232475

Technical details for CVE-2022-232475 are not publicly available in the provided documents; monitor for updates.

CVE-2022-44705

Technical details for CVE-2022-44705 are not publicly available in the provided documents. There is no information on affected products, impact, vectors, or remediation. Monitor for future updates.

CVE-2022-16126

Technical details for CVE-2022-16126 are not publicly available in the provided documents. No affected products, impact, or remediation are specified. Monitor for updates from official sources.

CVE-2021-41624

CVE-2021-41624 is associated with a memory-leak DoS in F5 BIG-IP. The CNNVD entry describes F5 BIG-IP as an application delivery platform and notes a memory leak vulnerability that triggers denial of service. The provided documents do not specify affected versions, vulnerable components, exploit ...

CVE-2020-35282

The connected IBM advisories confirm CVE-2020-35282 affects IBM WebSphere Application Server (WAS) when shipped with IBM Operations Analytics Predictive Insights. Affected: WAS 8.0, 8.5, 9.0 as part of Predictive Insights; vulnerability type: Server-Side Request Forgery (and related spoofing/remo...

CVE-2021-39673

CVE-2021-39673 is publicly documented in Android bulletin contexts as a high-severity issue listed under the 2022-10 patch levels for Android 13 (AOSP 13). Connected documents show it alongside other CVEs with Android patch-level mappings (e.g., CVE-2022-20419 and CVE-2022-20412) and explicitly c...

CVE-2013-3013

Summary of CVE-2013-3013 context (IBM Smart Analytics System 5600): The related IBM security bulletin notes that the 5600 system’s management host runs Firefox configured to use the IBM Java SDK for Java Web Start, exposing the system to Java SDK vulnerabilities identified in CVEs such as CVE-201...

CVE-2019-4627

IBM InfoSphere Information Server is affected by CVE-2019-4627 (Input validation XSS). The vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected products/versions: IBM InfoSphere Information Server (11.3...

CVE-2019-4584

CVE-2019-4584 is an IBM Db2 local-privilege-escalation vulnerability. IBM Db2 for Linux, UNIX and Windows (including Db2 Connect) is vulnerable to a buffer overflow that could allow an authenticated local attacker to execute arbitrary code on the system as root. The issue affects all fix pack lev...

CVE-2019-4097

CVE-2019-4097 is a spoofing vulnerability in Platform System Manager (PSM) shipped with IBM Cloud Pak System/PureApplication System. An authenticated user could steal or manipulate customer sessions and cookies. Affected product: IBM Cloud Pak System (V2.3.0). CVSS Base score 4.3. Remediation: up...

CVE-2022-3227

CVE-2022-3227 corresponds to a Local File Inclusion flaw in the WordPress plugin SearchWP Live Ajax Search (versions

CVE-2022-1972

Removed by vendor...

CVE-2019-4479

CVE-2019-4479 is linked to IBM Business Process Manager (BPM) and IBM Business Automation Workflow (BAW). The connected IBM bulletins describe two concrete exposure types: (1) SQL injection allowing a remote attacker to view/modify/delete data via crafted SQL, affecting BPM/BAW across multiple ve...

CVE-2018-1849

CVE-2018-1849 is a Cross-Site Scripting vulnerability in IBM Business Automation Workflow (BPM/BPM Advanced/BPM Explorer) that allows embedding arbitrary JavaScript in the web UI, potentially exposing credentials in a trusted session. Affected products and versions include: IBM Business Automatio...

CVE-2022-22403

IBM Aspera Faspex 5.0.0 and 5.0.1 are affected by CVE-2022-22403. The root cause is that authorization tokens or session cookies are not set with the Secure attribute, enabling an attacker to snoop cookie values when a user visits an insecure http link or a compromised site. IBM has addressed thi...

CVE-2022-25704

CVE-2022-25704 is listed in the Android/Qualcomm Bluetooth vulnerability set as a high-severity issue affecting Qualcomm closed-source components. Connected sources indicate it is part of the 2022 Android security update; no exploitation details are provided in the supplied documents. Remediation...

CVE-2021-3364

Technical details about CVE-2021-3364 are not publicly available in the provided documents. The Connected Fedora package notices mention libtar updates but do not describe the vulnerability. Monitor for future updates.