Lucene search
+L

2182 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2024/02/29 8:16 p.m.67 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to CRLF injection in Python urllib3 [CVE-2020-26137]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to CRLF injection in Python urllib3, by an attacker's ability to insert CR and LF control characters in the first argument of putrequest CVE-2020-26137. Python urllib3 is included as a component of our Speech...

6.5CVSS6.8AI score0.02269EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/29 8:15 p.m.48 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Rsync [CVE-2022-29154]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Rsync, caused by improper validation of file names CVE-2022-29154. Rsync is used as a component of our Speech runtimes. This vulnerabilitiy has been addressed. Please read th...

7.4CVSS7.4AI score0.02168EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/29 8:14 p.m.32 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a man-in-the-middle attack in CPAN.pm [CVE-2023-31484]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a man-in-the-middle attack in CPAN.pm, caused by improper validation of TLS certificates when downloading distributions over HTTPS. CVE-2023-31484. CPAN.pm is used as a component of our Speech runtimes. This...

8.1CVSS7.6AI score0.01548EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/29 8:13 p.m.33 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Perl HTTP [CVE-2023-31486]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Perl HTTP Tiny module, caused by the failure to verify TLS certificates by default and requiring users to opt in to verify certificates CVE-2023-31486. Perl HTTP is used as a component ...

8.1CVSS7.8AI score0.01742EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/02/29 2:15 a.m.13 views

CVE-2023-27545

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947...

5.5CVSS5.8AI score0.00195EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/29 2:15 a.m.22 views

CVE-2023-27545

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947...

5.5CVSS3.5AI score0.00195EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/29 2:15 a.m.20 views

Information disclosure

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947...

2.1CVSS5.6AI score0.00195EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/29 1:40 a.m.31 views

CVE-2023-38372

An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to impersonate an authorized platform user. IBM X-Force ID: 261201...

7.5CVSS5.7AI score0.00802EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/29 1:40 a.m.7 views

CVE-2023-38372

An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to impersonate an authorized platform user. IBM X-Force ID: 261201...

7.5CVSS5.8AI score0.00802EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/29 1:40 a.m.30 views

Authentication flaw

An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to impersonate an authorized platform user. IBM X-Force ID: 261201...

2.6CVSS6.9AI score0.00802EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/29 12:45 a.m.115 views

CVE-2023-27545

IBM Watson CloudPak for Data Data Stores contains an information-disclosure vulnerability (CVE-2023-27545). The issue allows stored web pages to be read by another user on the same system due to how Data Stores handles local storage. Affected product/version: Watson CloudPak for Data Data Stores ...

5.5CVSS3.4AI score0.00195EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/29 12:45 a.m.17 views

CVE-2023-27545 IBM Watson CloudPak for Data Data Stores information disclosure

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947...

4CVSS5.5AI score0.00195EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/29 12:45 a.m.36 views

CVE-2023-27545 IBM Watson CloudPak for Data Data Stores information disclosure

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947...

4CVSS3.7AI score0.00195EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/29 12:23 a.m.14 views

CVE-2023-38372 IBM Watson IoT Platform information disclosure

An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to impersonate an authorized platform user. IBM X-Force ID: 261201...

5.9CVSS6.7AI score0.00802EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/29 12:23 a.m.43 views

CVE-2023-38372 IBM Watson IoT Platform information disclosure

An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to impersonate an authorized platform user. IBM X-Force ID: 261201...

5.9CVSS5.8AI score0.00802EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/29 12:23 a.m.57 views

CVE-2023-38372

CVE-2023-38372 affects IBM Watson IoT Platform 1.0. An unauthorized attacker with a valid security authentication token can impersonate an authorized platform user, per NVD/IBM advisories. Impact is high on confidentiality (token abuse) with no indicated impact on integrity or availability in the...

7.5CVSS5.7AI score0.00802EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.20 views

IBM Watson IoT Platform Security Breach

IBM Watson IoT Platform is an Internet of Things IoT solution platform from International Business Machines IBM. A security vulnerability exists in IBM Watson IoT Platform version 1.0 that stems from the fact that an unauthorized attacker who obtains a secure authentication token can use it to...

7.5CVSS6.8AI score0.00802EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/28 11:40 p.m.31 views

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in QOS.ch Sarl Logback

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of QOS.ch Sarl Logback Vulnerability Details CVEID:CVE-2023-6481 DESCRIPTION: QOS.ch Sarl Logback is vulnerable to a denial of service, caused by a serialization flaw in the logback receiver component...

7.5CVSS6.8AI score0.00682EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/28 11:38 p.m.21 views

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in follow-redirects

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of follow-redirects. Vulnerability Details CVEID:CVE-2023-26159 DESCRIPTION: follow-redirects could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An...

7.3CVSS6.5AI score0.00797EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/28 10:19 p.m.33 views

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Libtiff

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Libtiff. Vulnerability Details CVEID:CVE-2023-30774 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by a heap-based buffer overflow related to TIFFTAGINKNAMES and TIFFTAGNUMBEROFIN...

7.7CVSS7.5AI score0.01124EPSS
SaveExploits9Affected Software1
Rows per page
Query Builder