IBM i Improper Authentication

IBM Sterling Connect:Direct for Unix Buffer Overflow

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

https://github.com/djust-org/djust/security/advisories/GHSA-r57g-mc79-8hj2

https://github.com/djust-org/djust/commit/45a5045793ebe7c9c2df86b0ad34275af6822619

https://github.com/djust-org/djust/commit/744bccf699c65c815d9379b36236a7c5592a339b

https://github.com/djust-org/djust/commit/85eed7caaf620bdb08986f2f3bb79432c0d3d715

https://github.com/djust-org/djust/commit/a62caf6b4ef540ad688d4dfdfa407ff914c78728

https://github.com/djust-org/djust/releases/tag/v1.0.10

https://github.com/djust-org/djust/releases/tag/v1.1.7

https://github.com/djust-org/djust/releases/tag/v1.2.4

https://github.com/djust-org/djust/releases/tag/v1.3.0rc8

djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool

Crypt::Age::Header::parse_from_fh

Crypt::Age::Header::unwrap_file_key

CWE-770 Allocation of Resources Without Limits or Throttling

CWE-405 Asymmetric Resource Consumption (Amplification)

Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key

Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Data Integrator.  Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator.

Oracle Advisory

Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in takeover of Oracle Essbase.

Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Essbase.

Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Essbase.

Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase.  While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as  unauthorized update, insert or delete access to some of Oracle Essbase accessible data.

Search

Recent