CVE-2015-4136

The CVE-2015-4136 entry is supported by Atlassian advisories BAM-16023 (and BAM-16023 cross‑references) describing a vulnerability in Bamboo 5.8.0/5.8.1 where the Windows Stock Image (Windows Server 2012 R2) AMI included a publicly known password for the ‘bamboo’ user. This allowed SSH access to ...

CVE-2018-18855

CVE-2018-18855 describes a denial-of-service in spray-json (Lightbend Spray) via an uncontrolled recursion in JsonParser during deep nesting. IBM’s bulletin ties this to IBM Cloud APM (Base Private 8.1.4 and Advanced Private 8.1.4). Root cause: JsonParser’s unbounded recursion allows resource exh...

CVE-2021-35470

The CVE placeholder CVE-2021-35470 is superseded by concrete details from connected sources: WordPress Inline Related Posts plugin (

CVE-2021-25632

CVE-2021-25632 is a LibreOffice vulnerability with code execution impact. Affected products are LibreOffice 7.0.x before 7.0.6 and 7.1.x before 7.1.3. The issue arises from an insecure handling path leading to arbitrary code execution. Some connected sources also reference an update to LibreOffic...

CVE-2021-29270

CVE-2021-29270 is referenced in the Mageia/MGASA-2021-0365 advisory as a vulnerability in systemd. The issue affects systemd versions 220–248, where a memory allocation with an excessive size value (involving strdupa and alloca for a pathname controlled by a local attacker) can crash the operatin...

CVE-2019-19233

The connected OpenVAS/Mageia OSV/OSVDB entries document CVEs related to sudo in CVE-2019-19232 and CVE-2019-19234. The advisory MGASA-2020-0246 explains that sudo could run commands with unknown user/group ids when configured with aliases like ALL, potentially letting sudo impersonate non-existen...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2021-41741

CVE-2021-41741 is addressed in the openSUSE/OpenSSL Nextcloud updates. The issue is described as high memory usage when generating a preview for a broken image in Nextcloud Server. Affected software is Nextcloud Server (self-hosted cloud platform); the root cause is related to image preview handl...

CVE-2019-4313

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 is affected by CVE-2019-4313, which describes using a salt-less one-way hash for inputs (e.g., passwords) that should be salted, potentially exposing sensitive information. Remediation is to upgrade to the fixed 4.1.0 installer (rhel7.x IBM...

CVE-2021-33517

CVE-2021-33517 and CVE-2021-36090 are vulnerabilities in Apache Commons Compress that affect IBM WebSphere Liberty (and WebSphere Liberty-based bundles) used in IBM Cloud Pak for Applications and IBM WebSphere Application Server families. The issues cause denial of service through memory-related ...

CVE-2017-1123

CVE-2017-1123 is an escal ation of privilege in the IBM DS8000 Hardware Management Console (HMC) service interface. The IBM bulletin lists affected models (DS8880/DS8870/DS8800) and indicates affected code levels where exposure exists; a patch set CVE_1Q2018_v1.0 is available to remediate all lis...

CVE-2020-4331

IBM WebSphere eXtreme Scale Liberty Deployment is affected by a cross-site scripting vulnerability (CVE-2020-4331) in the Web UI, allowing arbitrary JavaScript to be embedded and potentially exposing credentials in a trusted session. Affected versions include WebSphere eXtreme Scale Liberty 8.6.1...

CVE-2018-1400

CVE-2018-1400 is an IBM vulnerability: cross-site scripting in IBM Rational Software Architect Design Manager (RSA DM) / Rational Rhapsody Design Manager (RDM) Web UI. The issue allows embedding arbitrary JavaScript in configuration names, potentially leading to credential disclosure within a tru...

CVE-2019-4629

IBM’s bulletin confirms CVE-2019-4629 as affecting IBM DOORS Next Generation (DNG/RRC) with a cross-site scripting vulnerability in the web UI. Affected products/versions include Rational CLM 6.0 through 6.0.6.1, Rational Quality Manager 6.0–6.0.6.1, Rational Team Concert 6.0–6.0.6.1, Rational DO...

CVE-2019-4604

IBM DOORS Next Generation (DNG/RRC) is affected by CVE-2019-4604, an XML External Entity (XXE) vulnerability in XML data processing. The issue could allow a remote attacker to expose sensitive information or cause memory resource consumption. Affected products/versions include Rational CLM 6.0 th...

CVE-2019-4168

CVE-2019-4168 Details (IBM UrbanCode Deploy) : IBM UrbanCode Deploy could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. Affected products/versions: all fixpacks of IBM UrbanCode Deploy 7.0–7.0.2.2 and IBM UrbanCode Deploy 6.2...

CVE-2019-4490

CVE-2019-4490 concerns IBM UrbanCode Deploy (UCD). A security vulnerability allows maliciously crafted data in UCD to generate a malicious CSV download file when opened with certain third‑party tools. IBM’s bulletin notes affected products as UCD (all versions) with CVSS base score 7.8, and lists...

CVE-2020-4538

CVE-2020-4538 affects IBM Security Identity Manager (ISIM) 6.0.0. The vulnerability arises from reuse of another user’s JSESSIONID, enabling a privileged local user to perform unauthorized actions. IBM's bulletin confirms the issue and assigns a CVSS Base score of 6.7. Remediation provided: upgra...

CVE-2019-4499

CVE-2019-4499 affects IBM Secure Gateway Client (versions 1.8.0.0–1.8.2.2). The vulnerability arises from hard-coded credentials used for inbound authentication or internal data encryption. IBM’s bulletin lists remediation by upgrading to Secure Gateway Client 1.8.3.0 (fixed version). No other ex...

CVE-2020-20440

IBM Security Bulletin indicates CVE-2020-20440 is a server-side request forgery vulnerability in IBM WebSphere Application Server when shipped with IBM Security Identity Manager (ISIM). Affected products: ISIM 6.0.0; WebSphere Application Server versions 7.0 and 8.5. Remediation: ISIM 6.0.0 with ...