|
194751
|
8.8 |
HIGH
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 2020…
|
NVD-CWE-noinfo
|
CVE-2021-29754
|
2024-11-21 15:01 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194752
|
7.4 |
HIGH
Network
|
wp-cli
|
wp-cli
|
WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communicat…
|
-
|
CVE-2021-29504
|
2024-11-21 15:01 |
2021-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194753
|
7.5 |
HIGH
Network
|
bubble_fireworks_project
|
bubble_fireworks
|
bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly ver…
|
-
|
CVE-2021-29500
|
2024-11-21 15:01 |
2021-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194754
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana…
|
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…
|
CWE-79
Cross-site Scripting
|
CVE-2021-29670
|
2024-11-21 15:01 |
2021-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194755
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana…
|
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…
|
CWE-79
Cross-site Scripting
|
CVE-2021-29668
|
2024-11-21 15:01 |
2021-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194756
|
7.8 |
HIGH
Local
|
ibm
|
spectrum_scale
|
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context…
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2021-29740
|
2024-11-21 15:01 |
2021-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194757
|
7.8 |
HIGH
Local
|
ibm
|
security_verify_access
|
IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with ele…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-29665
|
2024-11-21 15:01 |
2021-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194758
|
6.5 |
MEDIUM
Network
|
genivi
|
diagnostic_log_and_trace
|
GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vul…
|
NVD-CWE-noinfo
|
CVE-2021-29507
|
2024-11-21 15:01 |
2021-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194759
|
8.8 |
HIGH
Network
|
xstream_project debian fedoraproject netapp oracle
|
xstream debian_linux fedora snapmanager webcenter_portal webcenter_sites communications_unified_inventory_management enterprise_manager_ops_center banking_credit_facilities_pr…
|
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of th…
|
-
|
CVE-2021-29505
|
2024-11-21 15:01 |
2021-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194760
|
8.3 |
HIGH
Network
|
envoyproxy
|
envoy
|
Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path wi…
|
-
|
CVE-2021-29492
|
2024-11-21 15:01 |
2021-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|