234 matches found
Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2021-38958)
Summary IBM MQ Appliance has resolved a denial of service vulnerability. Vulnerability Details CVEID: CVE-2021-38958 DESCRIPTION: IBM MQ Appliance is affected by a denial of service attack caused by a concurrency issue. CVSS Base score: 5.1 CVSS Temporal Score: See:...
Oracle PeopleSoft Enterprise信息泄露漏洞
Oracle PeopleSoft Products is an enterprise human capital management solution from Oracle Corporation. An information disclosure vulnerability exists in the Supplier Portal component of Oracle PeopleSoft Enterprise SCM version 9.2. An attacker could compromise Oracle PeopleSoft Enterprise SCM by...
CVE-2021-35543
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2021-39211
GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemetry endpoint discloses GLPI and server information. This issue is fixed in version 9.5.6. As a workaround, remove the file ajax/telemetry.php, which is not needed for usual...
CVE-2021-39211 Disclosure of GLPI and server information in telemetry endpoint
GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemetry endpoint discloses GLPI and server information. This issue is fixed in version 9.5.6. As a workaround, remove the file ajax/telemetry.php, which is not needed for usual...
Information disclosure
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit this vulnerability, leading to unauthorized information disclosure...
CVE-2021-36281
Dell EMC PowerScale OneFS versions 8.2.x–9.2.x contain an incorrect permission assignment that can allow a low-privileged authenticated user to escalate privileges. Affected component: privilege/permission handling in OneFS API surface. Root cause: misassigned permissions enabling higher-privileg...
Mitel MiCollab Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in the "Join a Meeting" page of Mitel MiCollab, an enterprise collaboration software and tools platform solution, in versions prior to Mitel MiCollab 9.2 FP2. The vulnerability stems from insufficient input validation. An attacker could execute arbitrar...
EMC PowerScale安全漏洞
Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect privilege assignment. An attacker could exploit this vulnerability to elevate privileges...
CVE-2021-2455
Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft component: Person Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
Security Bulletin: IBM MQ Appliance is affected by an OpenLDAP vulnerability (CVE-2020-25692)
Summary IBM MQ Appliance has resolved an OpenLDAP vulnerability. Vulnerability Details CVEID: CVE-2020-25692 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted TCP packet, a remote attacker could exploit this...
Security Bulletin: IBM MQ Appliance is affected by a Java SE vulnerability (CVE-2020-27221)
Summary IBM MQ Appliance has resolved a Java SE vulnerability. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. By sending an...
Security Bulletin: IBM MQ Appliance is affected by a Java SE vulnerability (CVE-2020-14782)
Summary IBM MQ Appliance has resolved a Java SE vulnerability. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and ...
SquareBox CatDV Server 访问控制错误漏洞
Square Box Systems SquareBox CatDV Server is a software application from Square Box Systems. It provides an agile media management and workflow orchestration platform. A security vulnerability exists in SquareBox CatDV Server through 9.2, which can be exploited by an attacker to generate valid...
Security Bulletin: IBM MQ Appliance is affected by multiple BIND vulnerabilities (CVE-2020-8622, CVE-2020-8623, CVE-2020-8624)
Summary IBM MQ Appliance has resolved multiple BIND vulnerabilities. Vulnerability Details CVEID: CVE-2020-8622 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an assertion failure when attempting to verify a truncated response to a TSIG-signed request. By sending a...
Mitel Networks MiCollab 授权问题漏洞
Mitel Networks MiCollab is a mobile application from Mitel Networks Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A security vulnerability previously existed in Mitel Networks MiCollab version 9.2, which stemmed from a library index page in...
PT-2020-18258 · Ibm · Ibm Mq
Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.2 Description: The issue is caused by an error processing connecting applications, which can lead to a denial of service attack. Recommendations: For IBM MQ version 9.2, at the moment, there is no information about a newer...
Security Bulletin: IBM MQ is affected by a vulnerability in json-c (CVE-2020-12762)
Summary An applicable vulnerability was found in the json-c library that is bundled with MQ server and native client installations. Vulnerability Details CVEID: CVE-2020-12762 DESCRIPTION: json-c could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow...
CVE-2020-14778
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM...