Warning issued over Royal ransomware

As part of its StopRansomware effort, the Cybersecurity and Infrastructure Security Agency CISA has published a Cybersecurity Advisory CSA about Royal ransomware. Royal ransomware is a Ransomware-as-a-service Raas that first made an appearance in January 2022. In September of that year, it began...

CVE-2019-4664

CVE-2019-4664 affects IBM Spectrum Scale (V5.0.0.0–V5.0.4.0). A local attacker could exploit a specially crafted request to execute arbitrary commands on the system. IBM provides a fix in V5.0.4.1 via Fix Central; no workarounds are listed. Affected product details and remediation are documented ...

CVE-2018-1966

IBM Security Identity Manager Virtual Appliance (VA) versions 7.0.1–7.0.1.11 are affected by CVE-2018-1966, where error messages disclose sensitive information about the environment, users, or data. This is part of multiple vulnerabilities addressed in the IBM bulletin for ISIM VA, which also lis...

CVE-2019-4573

IBM Maximo Asset Management is affected by CVE-2019-4573, where an error message can disclose sensitive information about the environment, users, or related data. Affected versions include Maximo Asset Management core product 7.6 (and dependent Industry Solutions and Control Desk products when in...

CVE-2018-1709

Jazz for Service Management (IBM) versions 1.1.0–1.1.3 are affected by CVE-2018-1709. The IBM bulletin describes a cross-site scripting vulnerability in the Dashboard Application Services Hub that can allow arbitrary JavaScript in the web UI and potential credentials disclosure within a trusted s...

CVE-2018-1613

CVE-2018-1613 is a confirmed vulnerability in IBM Platform Symphony and IBM Spectrum Symphony involving a vertical authorization bypass in the Symping utility. A local attacker could obtain a privileged token and gain privileges or access highly sensitive data. Affected products/versions: IBM Pla...

CVE-2018-1707

CVE-2018-1707 is a stored cross-site scripting (XSS) vulnerability affecting IBM Platform Symphony and IBM Spectrum Symphony. Affected products/versions: Platform Symphony 7.1 Fix Pack 1 and 7.1.1; Spectrum Symphony 7.1.2 and 7.2.0.2. The vulnerability allows an attacker to embed arbitrary JavaSc...

CVE-2018-1855

CVE-2018-1855 is an IBM Spectrum Protect Operations Center (formerly Tivoli Storage Manager Operations Center) cross-site scripting vulnerability. Versions affected: 8.1.0.000–8.1.6.100 and 7.1.0.000–7.1.9.100. The flaw allows a remote attacker to inject arbitrary JavaScript into the Web UI, pote...

CVE-2018-1854

IBM Spectrum Protect Operations Center (formerly Tivoli Storage Manager Operations Center) is affected by CVE-2018-1854: a cross-site scripting vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. Affected versions are 8.1.0.000–8.1.6.100 and 7.1.0.000–7.1...

CVE-2017-1579

CVE-2017-1579 is addressed in IBM DOORS Next Generation (DNG/RRC). The IBM Security Bulletin reports a cross-site scripting vulnerability in the Web UI of Rational DOORS Next Generation, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted sessi...

CVE-2012-1359

CVE-2012-1359, as reserved, has a connected IBM advisory detailing multiple security vulnerabilities in IBM JRE 7.0 SR2 or earlier (and non-IBM Java 7.0 when used with Rational Functional Tester). The bulletin lists numerous CVEs (e.g., CVE-2012-3159 and related issues across JRE components such ...

CVE-2018-1385

CVE-2018-1385 is referenced in IBM API Connect security bulletin: it describes use of weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Affected IBM API Connect versions are 5.0.0.0–5.0.6.5, 5.0.7.0–5.0.7.2, and 5.0.8.0–5.0.8.1. Re...

CVE-2016-9974

IBM Security Guardium Database Activity Monitor is affected by CVE-2016-9974: a shell injection in the CLI 'support execute' command could allow a locally authenticated attacker to execute arbitrary commands. Affected versions include Guardium v9.x and v10.x (up to 10.1.2). The root cause is comm...

CVE-2021-0866

CVE-2021-0866 is listed under Android 12 Framework with type Information Disclosure (ID) and Moderate severity, referenced by Android bug ID A-184658476. The provided connected document does not include details on the root cause, affected subcomponent, impact scope, exploitability, or a fix. No r...

CVE-2021-0853

CVE-2021-0853 is listed in the Android 12 security bulletin under the Framework component with Type: ID (Information disclosure) and Severity: Moderate . The provided document set does not include details on the root cause, affected subcomponents, specific versions, exploit vectors, or remediatio...

CVE-2021-0849

CVE-2021-0849 is listed in Android 12 Framework vulnerability details as an Elevation of Privilege (EoP) issue with Moderate severity. The Android 12 security release notes group it under Framework and indicate it is addressed in Android 12, with patches to be released to the Android Open Source ...

CVE-2021-0848

In Android 12, CVE-2021-0848 is listed under Media Framework with Android bug ID A-160187491, classified as ID (Information Disclosure) and Moderate severity. No exploitation details or remediation are provided in the connected document.

CVE-2021-0842

CVE-2021-0842 is listed in Android 12 security release notes under the System section as an Elevation of Privilege (EoP) vulnerability with Moderate severity. The provided documents do not include exploit details; remediation is via Android 12/AOSP patches released as part of the update process.

CVE-2021-0832

CVE-2021-0832 is listed in the Android 12 security release notes under the System component. The Android bulletin records CVE-2021-0832 with reference A-172839851, Type: ID (information disclosure), Severity: Moderate. The provided documents do not include details on affected products beyond the ...

CVE-2021-0830

CVE-2021-0830 is listed under the Android 12 release notes in the Framework component, classified as an Elevation of Privilege (EoP) issue with Moderate severity. The entry confirms affected area as Android Framework and indicates fixes were addressed as part of the Android 12 release. The Androi...