solaris Archives - CVE Vulnerability

CVE-2019-4728

Sun, 26 Feb 2023 06:33:28 +0000

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452.

The post CVE-2019-4728 appeared first on CVE Vulnerability.

CVE-2019-4738

Sun, 26 Feb 2023 06:33:28 +0000

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.

The post CVE-2019-4738 appeared first on CVE Vulnerability.

CVE-2019-4681

Sun, 26 Feb 2023 06:33:27 +0000

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171734.

The post CVE-2019-4681 appeared first on CVE Vulnerability.

CVE-2019-4568

Sun, 26 Feb 2023 06:33:26 +0000

IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service when receiving data on the channel. IBM X-Force ID: 166629.

The post CVE-2019-4568 appeared first on CVE Vulnerability.

CVE-2019-4386

Sun, 26 Feb 2023 06:33:23 +0000

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause the server to crash. IBM X-Force ID: 162714.

The post CVE-2019-4386 appeared first on CVE Vulnerability.

CVE-2019-4322

Sun, 26 Feb 2023 06:33:22 +0000

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 161202.

The post CVE-2019-4322 appeared first on CVE Vulnerability.

CVE-2019-4154

Sun, 26 Feb 2023 06:33:20 +0000

The post CVE-2019-4154 appeared first on CVE Vulnerability.

CVE-2019-4102

Sun, 26 Feb 2023 06:33:19 +0000

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.

The post CVE-2019-4102 appeared first on CVE Vulnerability.

CVE-2019-12387

Sun, 26 Feb 2023 06:29:51 +0000

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

The post CVE-2019-12387 appeared first on CVE Vulnerability.

CVE-2021-29722

Thu, 23 Feb 2023 14:09:04 +0000

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095.

The post CVE-2021-29722 appeared first on CVE Vulnerability.