4055 matches found
CVE-2025-52653 Cross Site Scripting vulnerability in the web application
HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access...
CVE-2025-52653
The CVE-2025-52653 entry concerns HCL MyXalytics web application. A Cross Site Scripting (XSS) vulnerability in the web UI is documented, enabling execution of unauthorized scripts and potentially leading to unauthorized actions or access. Affected component is the web application (MyXalytics) wi...
PT-2025-40572
Name of the Vulnerable Software and Affected Versions HCL MyXalytics affected versions not specified Description The HCL MyXalytics web application is susceptible to a Cross Site Scripting issue. This allows the execution of unauthorized scripts, which could lead to unauthorized actions or access...
ProjectSend < r1720 Improper Authorization
ProjectSend version prior to r1720 is affected by an Improper Authorization vulnerability. An unauthenticated attacker can exploit this issue to access sensitive information and perform unauthorized actions within the application. No source data...
Cross-site Request Forgery (CSRF)
Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF in the API. An attacker can perform unauthorized actions, such as creating and starting arbitrary instances or executing arbitrary commands inside containers, by tricking a victim authenticated with clien...
Fiora chat group avatar is vulnerable to XSS via SVG files
File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...
CVE-2023-50300
IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...
CVE-2023-50300 IBM Transformation Extender Advanced improper access control
IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...
Security Bulletin: IBM Transformation Extender Advanced could allow a local user to perform unauthorized actions due to improper access controls.
Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, could allow a local user to perform unauthorized actions due to improper access controls. Vulnerability Details CVEID:CVE-2023-50300 DESCRIPTION: IBM Standards Processing Engine could allow a local user t...
PT-2025-40277
Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description The software contains improper access controls, potentially allowing a local user to perform unauthorized actions. Recommendations At the moment, there is no information about a...
CVE-2025-23292
NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to partial denial of service UI component...
CVE-2025-23293
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure...
CVE-2025-23292
NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to partial denial of service UI component...
CVE-2025-23292
Summary : CVE-2025-23292 affects NVIDIA Delegated Licensing Service (DLS) for all appliance platforms. The vulnerability is a SQL injection in the DLS component that could allow an attacker to perform an unauthorized action, with potential partial denial of service affecting the UI. The CVSSv3.1 ...
CVE-2025-36351 IBM License Metric Tool bypass security
IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions...
CVE-2025-36351
IBM License Metric Tool version 9.2.0–9.2.40 is affected by CVE-2025-36351, where an authenticated user could bypass REST API access controls and perform unauthorized actions. The issue stems from insufficient authorization checks in the REST API and is rated with CVSSv3.1 base score 4.3 (MEDIUM)...
CVE-2024-43192
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
PT-2025-39829
Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions 9.2.0 through 9.2.40 Description An authenticated user can bypass access controls within the REST API interface, potentially leading to unauthorized actions. The issue relates to access control within the REST...
CVE-2024-43192 IBM Storage TS4500 Library cross-site request forgery
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...