‼ CVE-2022-35406 ‼
📖 Read
via "National Vulnerability Database".
A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or Intruder, it may be incorrectly interpreted as a redirect.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34167 ‼
📖 Read
via "National Vulnerability Database".
IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229432.📖 Read
via "National Vulnerability Database".
🕴 DoJ Charges CEO for Dealing $1B in Fake Cisco Gear 🕴
📖 Read
via "Dark Reading".
Fraudster allegedly passed off refurbished, modified Cisco equipment as new to hospitals, schools, and even the military.📖 Read
via "Dark Reading".
Dark Reading
DoJ Charges CEO for Dealing $1B in Fake Cisco Gear
Fraudster allegedly passed off refurbished, modified Cisco equipment as new to hospitals, schools, and even the military.
‼ CVE-2015-5597 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-5328 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-5596 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-4169 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22463 ‼
📖 Read
via "National Vulnerability Database".
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 225079.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22370 ‼
📖 Read
via "National Vulnerability Database".
IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 221194.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-7800 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-8819 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35411 ‼
📖 Read
via "National Vulnerability Database".
rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed with unpickle.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2343 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22476 ‼
📖 Read
via "National Vulnerability Database".
IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2015-3260 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35410 ‼
📖 Read
via "National Vulnerability Database".
mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34914 ‼
📖 Read
via "National Vulnerability Database".
Webswing before 22.1.3 allows X-Forwarded-For header injection. The client IP address is associated with a variable in the configuration page. The {clientIp} variable can be used as an application startup argument. The X-Forwarded-For header can be manipulated by a client to store an arbitrary value that is used to replace the clientIp variable (without sanitization). A client can thus inject multiple arguments into the session startup. Systems that do not use the clientIP variable in the configuration are not vulnerable. The vulnerability is fixed in these versions: 20.1.16, 20.2.19, 21.1.8, 21.2.12, and 22.1.3.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-3263 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22464 ‼
📖 Read
via "National Vulnerability Database".
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225081.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22465 ‼
📖 Read
via "National Vulnerability Database".
IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due to improper access permissions. IBM X-Force ID: 225082.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2344 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.📖 Read
via "National Vulnerability Database".