Security Bulletin: Vulnerabilities in IBM WebSphere Application Server and WebSphere Application Server Liberty affect IBM Watson Explorer (CVE-2024-22354)

Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty is used by IBM Watson Explorer. IBM Watson Explorer has addressed the applicable CVE CVE-2024-22354. Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM...

PT-2024-5853 · Hitachi · Hitachi Ops Center Common Services

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Common Services versions 10.9.3-00 through 11.0.2-01 Description: The issue is related to an authentication bypass in Hitachi Ops Center Common Services, which could allow an attacker to bypass the authentication process...

PT-2024-13669 · Projeqtor · Projeqtor

Name of the Vulnerable Software and Affected Versions: ProjeQtOr version 11.0.2 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted script to the checkvalidHtmlText function in the ack.php and security.php files. This enables the attacker...

Projeqtor Cross-Site Scripting Vulnerability

Projeqtor is a PHP-based open source project management software from the Projeqtor community. The software is used to organize various functions required for multiple projects and is suitable for IT projects. A cross-site scripting vulnerability exists in Projeqtor version 11.0.2, which originat...

SUSE CVE-2017-0895

Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed...

Security Bulletin: IBM Tivoli Network Manager is vulnerable to information disclosure attacks due to vulnerabilities in Eclipse Jetty (CVE-2021-28169)

Summary Eclipse Jetty libraries jetty-io, jetty-client, jetty-http, jetty-util used by IBM Tivoli Network Manager, in versions = 9.4.40, = 10.0.2, = 11.0.2 , it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For...

CVE-2022-21934

Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2...

CVE-2021-36202 Metasys UI

Server-Side Request Forgery SSRF vulnerability in Johnson Controls Metasys could allow an authenticated attacker to inject malicious code into the MUI PDF export feature. This issue affects: Johnson Controls Metasys All 10 versions versions prior to 10.1.5; All 11 versions versions prior to 11.0....

Alkacon Software OpenCms 跨站脚本漏洞

Alkacon Software OpenCms is a professional, open source, easy-to-use web content management system from Alkacon Software, Germany. A cross-site scripting vulnerability exists in Alkacon Software OpenCMS versions 10.5.0 through 11.0.2, which allows a user with a low-privileged application to store...

Design/Logic Flaw

Adobe Bridge version 11.0.2 and earlier is affected by an Access of Uninitialized Pointer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of...

Adobe Bridge CC 缓冲区错误漏洞

Adobe Bridge, a free digital asset management application from Adobe, is vulnerable to an out-of-bounds read vulnerability in Adobe Bridge 11.0.2 and earlier. An attacker could exploit the vulnerability to read arbitrary file systems...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. An improper input validation vulnerability exists in Adobe Bridge 11.0.2 and earlier versions. An attacker can exploit the vulnerability to disclose arbitrary memory information in the context of the current user...

Adobe Bridge CC 缓冲区错误漏洞

Adobe Bridge is a free digital asset management application from Adobe. An out-of-bounds write vulnerability exists in Adobe Bridge 11.0.2 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

Adobe Bridge out-of-bounds read vulnerability (CNVD-2021-63276)

Adobe Bridge, a free digital asset management application from Adobe, is vulnerable to an out-of-bounds read vulnerability in Adobe Bridge 11.0.2 and earlier. An attacker could exploit the vulnerability to read arbitrary file systems...

PT-2021-4151 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 11.0.2 and earlier Description: The issue is related to insufficient input validation, allowing a remote attacker to redirect users to a malicious webpage. It is also described as an Access of Uninitialized Pointer...

PT-2021-7933 · Eclipse +3 · Eclipse Jetty +3

Name of the Vulnerable Software and Affected Versions: Eclipse Jetty versions = 9.4.40 Eclipse Jetty versions = 10.0.2 Eclipse Jetty versions = 11.0.2 Description: The vulnerability in the Eclipse Jetty servlet container is related to the lack of protection for service data. Exploitation of this...

Apple Safari < 11.0.2 Multiple Vulnerabilities

Binary data 700501.prm...

Apple Safari WebKit Web Inspector Arbitrary Code Execution Vulnerability

Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with Mac OS X and iOS operating systems.WebKit Web Inspector is one of the web inspector components. A security vulnerability exists in the WebKit Web Inspector component in Apple Safari versions prior to...

UBUNTU-CVE-2017-13885

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote...

Helix Player <= 11.0.2 Encoded URI Processing Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38161/info Helix Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successful exploits may allow remote attackers to execute arbitrary code in...