IBM Jazz Foundation 跨站脚本漏洞

IBM Jazz Foundation is a next-generation collaboration platform for software delivery technologies from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Jazz Foundation versions 7.0.2 iFix033 and earlier, 7.0.3 iFix012 and earlier, and 7.1.0 iFix002 and...

SUSE CVE-2022-38150

In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1...