Security Bulletin: Apache Commons Text as used by IBM Jazz Reporting Service is vulnerable to code execution [CVE-2022-42889]

Summary Apache Commons Text as used by IBM Jazz Reporting Service is vulnerable to arbitrary code execution. IBM has addressed the relevant CVE. CVE-2022-42889 Vulnerability Details CVEID:CVE-2022-42889 DESCRIPTION: OX AppSuite could allow a remote attacker to execute arbitrary code on the system...

CVE-2023-36721

Windows Error Reporting Service Elevation of Privilege Vulnerability...

CVE-2023-36721

Windows Error Reporting Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Error Reporting Service Elevation of Privilege Vulnerability...

CVE-2023-36721

CVE-2023-36721 is a Windows Elevation of Privilege vulnerability affecting the Windows Error Reporting Service. The CVSS vector is Local, with High impact on confidentiality, integrity, and availability; exploitRequires Low privileges and no user interaction, with high attack complexity. Public r...

CVE-2023-36721 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

sda-international.org Cross Site Scripting vulnerability OBB-3740123

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Kibana 8.10.3, 7.17.14 Security Update

Kibana heap buffer overflow vulnerability ESA-2023-19 On Sept 11, 2023, Google Chrome announced CVE-2023-4863, described as “Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted...

jpauc.com Cross Site Scripting vulnerability OBB-3739055

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

indu-tex.lu Cross Site Scripting vulnerability OBB-3739033

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

blome-direct.de Cross Site Scripting vulnerability OBB-3738935

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2023-42475

The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality...

CVE-2023-42475 Information Disclosure Vulnerability in Statutory Reporting

The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality...

CVE-2023-42475 Information Disclosure Vulnerability in Statutory Reporting

The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality...

CVE-2023-42475

The CVE-2023-42475 entry concerns a vulnerable file storage location in the Statutory Reporting application that could allow a low-privileged attacker to read server files, leading to information disclosure with low confidentiality impact. The available sources identify the affected software as t...

Microsoft Windows Error Reporting Security Vulnerability

Microsoft Windows Error Reporting WER is a component of Microsoft Corporation USA. It enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific problems. A security vulnerability exists in Microsoft Windows Error Reportin...

PT-2023-5923 · Sap · Sap Business One

Name of the Vulnerable Software and Affected Versions: SAP Business One B1i version 10.0 Description: The issue is related to the error reporting mechanism in SAP Business One, which allows an authorized attacker to retrieve the details of a fault message. This can be exploited to conduct an XXE...

CVE-2023-25822

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

cardgame-club.it Cross Site Scripting vulnerability OBB-3736020

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...