CVE-2012-0422

CVE-2012-0422 is acknowledged within IBM advisories as part of the Oracle Java SDK-related fixes shipped with WebSphere-related products. The connected IBM pages describe remediation for other CVEs (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169) and list affected WebSphere SDK versions (8.5.x, 8.0....

CVE-2020-22346

IBM Spectrum Protect Operations Center (versions 8.1.0.000–8.1.13.x) is vulnerable to CVEs CVE-2022-22348 (reverse tabnabbing) and CVE-2022-22346 (CSRF). Affected versions may allow an attacker to cause tabnabbing or unauthorized actions via CSRF. Remediation: upgrade to 8.1.14. CVSS bases: 4 and...

CVE-2022-35550

The IBM Security Bulletin for CVE-2022-35550 (linked to CVE-2021-35550 in the bulletin) indicates an information-leak vulnerability in IBM Cloud Pak for Multicloud Management Monitoring where Java SE JSSE usage by multiple components could allow an unauthenticated attacker to obtain sensitive inf...

Denial Of Service(DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2019-14435

According to connected Veracode data, the vulnerability affects rancher/rancher and is categorized as Information Disclosure caused by missing or improper Content-Security-Policy header values. The server response can leak confidential information, including Cookie values. There is no version or ...

CVE-2019-17591

Bolt CMS 3.x contains a CSRF vulnerability (CVE-2019-17591) demonstrated by public exploits targeting Bolt CMS 3.6.10. The exploit describes an authenticated user CSRF payload that posts to /index.php/async/folder/create to perform actions on behalf of the user. Connected sources show CSRF risk i...

CVE-2019-9887

The connected VERACODE entry describes a Cross-site Scripting (XSS) issue in the johnpbloch/wordpress package, caused by a flawed sanitization path where wp_filter_post_kses is used instead of wp_filter_kses. This allows HTML tags to pass through and be interpreted by the browser. The document do...

CVE-2019-14803

CVE-2019-14803 is connected to a privilege-escalation issue in HashiCorp Nomad via the exec driver, caused by improper setuid permissions. The Veracode entry confirms Nomad as affected and notes the root cause as the exec driver having improper setuid permissions. No exploit/vector details are pr...

CVE-2019-14803

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2020-17455

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2018-10006

Technical details for CVE-2018-10006 are not publicly available in the provided documents. Monitor for updates as more information may be released.

CVE-2021-39120

CVE-2021-39120 affects Atlassian Jira Server/Data Center prior to version 8.18.0. The vulnerability is an information disclosure in the comment notification functionality that allows remote attackers to learn when a restricted comment is removed from an issue. Affected versions are listed as

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2021-43417

The connected data indicates CVE-2021-43417 corresponds to a Directory Traversal in Nomad, caused by insufficient sanitization of authentication for users with job submission capabilities, enabling bypass of configured allowed paths for images. Affected software/component: Nomad (directory traver...

CVE-2019-16158

Fortinet FortiManager GUI contains an improper neutralization of input in the buffer parameter, enabling an authenticated attacker to perform an XSS attack. This vulnerability is documented in FG-IR-19-271 and is referenced in CNVD-2020-19918. No specific patch/version details are provided in the...

CVE-2014-9511

Summary: CVE-2014-9511 maps to a WordPress vulnerability in the Sell Downloads plugin (versions ≤ 1.0.1). The issue arises from a lack of input sanitization, allowing an attacker to disclose arbitrary files on the server by accessing them through the web context. This can lead to exposure of serv...

CVE-2020-24230

This CVE entry maps to a CSRF vulnerability in the WordPress Patreon plugin (versions ≤ 1.6.9). The flaw allows an attacker to overwrite or create user meta via CSRF, enabling unauthorized changes to user metadata. Impact is tied to insufficient request authentication for certain actions, as desc...

CVE-2021-29232

Summary: Multiple connected sources confirm a concrete vulnerability in WordPress Simple Membership plugin (versions ≤ 4.0.3; remediation to at least 4.0.4) enabling authenticated SQL injection from the admin backend. Affected component: WordPress Simple Membership plugin, backend/admin queries. ...

CVE-2021-25632

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2019-19233

The connected OpenVAS/Mageia OSV/OSVDB entries document CVEs related to sudo in CVE-2019-19232 and CVE-2019-19234. The advisory MGASA-2020-0246 explains that sudo could run commands with unknown user/group ids when configured with aliases like ALL, potentially letting sudo impersonate non-existen...