CVE-2022-1155: Undefined Security Weakness

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10...

CVE-2021-39710: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A...

CVE-2021-39737: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A...

CVE-2021-39716: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A...

CVE-2021-39720: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A...

CVE-2021-39723: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A...

Microsoft Azure 'AutoWarp' Bug Could Have Let Attackers Access Customers' Accounts

Details have been disclosed about a now-addressed critical vulnerability in Microsoft's Azure Automation service that could have permitted unauthorized access to other Azure customer accounts and take over control. "This attack could mean full control over resources and data belonging to the...

CVE-2022-24334: Undefined Security Weakness

In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server...

Security Bulletin: IBM PowerVM Novalink is vulnerable to provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications.

Summary IBM PowerVM Novalink, which consumes IBM WebSphere Application Server Liberty 21.0.0.10 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM strongly recommends...

Security Bulletin: Potential WebSphere Application Server weakness in security affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-1996)

Summary There is a potential for weaker than expected security in WebSphere Application Server which affects IBM Spectrum Control formerly Tivoli Storage Productivity Center. Vulnerability Details CVEID: CVE-2018-1996 DESCRIPTION: IBM WebSphere Application Server could provide weaker than expecte...

CVE-2022-23848: Undefined Security Weakness

In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability...

CVE-2022-25319: Undefined Security Weakness

An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled...

H3C SSL VPN - Username Enumeration

Exploit Title: H3C SSL VPN - Username Enumeration Exploit Author: LiquidWorm H3C SSL VPN Username Enumeration Vendor: Hangzhou H3C Technologies Co. | New H3C Technologies Co., Ltd. Product web page: https://www.h3c.com Affected version: n/a Summary: H3C SSL VPN is a secure VPN system based on SSL...

CVE-2021-39616: Undefined Security Weakness

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438...

CVE-2022-24961: Undefined Security Weakness

In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days...

CVE-2021-46101: Undefined Security Weakness

In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly...

CVE-2022-22310

IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM X-Force ID: 217224...

CVE-2022-22310

IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM X-Force ID: 217224...

Information disclosure

IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM X-Force ID: 217224...

CVE-2022-22310

CVE-2022-22310 affects IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12, described as providing weaker than expected security. A remote attacker could obtain sensitive information and gain unauthorized access to JAX-WS applications. The vulnerability is documented with a base ...