CLSA-2026-1779065204 TuxCare security update for semver (1 CVE)

TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.5-tuxcare.1...

Dromara Northstar security vulnerabilities

Dromara Northstar is an AI quantitative trading platform open-sourced by Dromara China. A security vulnerability exists in Dromara Northstar version 7.3.5 and earlier, which stems from improper access control due to misuse of the parameter Request in the file AuthorizationInterceptor.java...

IBM i security vulnerabilities

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i versions 7.3, 7.4, and 7.5 that originates from an easy bypass of the Navigator for i interface restrictions, which can be...

PT-2024-13328 · Themify · Themify Ultra

Name of the Vulnerable Software and Affected Versions: Themify Ultra versions through 7.3.5 Description: The issue is related to a Missing Authorization vulnerability in Themify Ultra. This vulnerability allows unauthorized access, potentially leading to data breaches or other security incidents...

PT-2023-30586 · Ibm · Ibm I +1

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.3 through 7.5 IBM i Db2 Mirror for i versions 7.4 through 7.5 Description: The issue allows clear-text passwords to be left in browser memory, which can be viewed using common browser tools before the memory is garbage...

Liferay Portal operating system command injection vulnerability

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. An operating system command injection vulnerability exists...

CVE-2019-5496

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2018-2660

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 7.3.5.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...