Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
disclosure management vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2016-9715
IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo...
Ibm Infosphere Master Data Management Server 11.0
Ibm Infosphere Master Data Management Server 11.4
Ibm Infosphere Master Data Management Server 11.6
Ibm Infosphere Master Data Management Server 11.3
Ibm Infosphere Master Data Management Server 11.5
5.4
CVSSv3
CVE-2020-11838
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x before 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
Microfocus Arcsight Management Center
Microfocus Arcsight Management Center 2.6.1
7.5
CVSSv3
CVE-2013-4786
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote malicious users to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
Oracle Fujitsu M10 Firmware
Intel Intelligent Platform Management Interface 2.0
1 EDB exploit
1 Github repository
7.5
CVSSv3
CVE-2023-26774
An issue found in Sales Tracker Management System v.1.0 allows a remote malicious user to access sensitive information via sales.php component of the admin/reports endpoint.
Sales Tracker Management System Project Sales Tracker Management System 1.0
4.9
CVSSv3
CVE-2022-28063
Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.
Simple Bakery Shop Management System Project Simple Bakery Shop Management System 1.0
5.4
CVSSv3
CVE-2020-4920
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...
Ibm Collaborative Lifecycle Management 6.0.2
Ibm Collaborative Lifecycle Management 6.0.6
Ibm Collaborative Lifecycle Management 6.0.6.1
Ibm Doors Next 7.0.0
Ibm Doors Next 7.0.1
Ibm Doors Next 7.0.2
Ibm Engineering Insights 7.0.0
Ibm Engineering Insights 7.0.1
Ibm Engineering Insights 7.0.2
Ibm Engineering Lifecycle Management 7.0.0
Ibm Engineering Lifecycle Management 7.0.1
Ibm Engineering Lifecycle Management 7.0.2
Ibm Engineering Requirements Management Doors Next 6.0.2
Ibm Engineering Requirements Management Doors Next 6.0.6
Ibm Engineering Requirements Management Doors Next 6.0.6.1
Ibm Engineering Test Management 7.0.0
Ibm Engineering Test Management 7.0.1
Ibm Engineering Test Management 7.0.2
Ibm Engineering Workflow Management 7.0.0
Ibm Engineering Workflow Management 7.0.1
Ibm Engineering Workflow Management 7.0.2
Ibm Rational Engineering Lifecycle Manager 6.0.2
5.4
CVSSv3
CVE-2022-35714
IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management 7.6.1.2
5.4
CVSSv3
CVE-2022-43866
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session....
Ibm Maximo Asset Management 7.6.1.2
Ibm Maximo Asset Management 7.6.1.3
5.4
CVSSv3
CVE-2020-4223
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
Ibm Maximo Asset Management 7.6.0.10
Ibm Maximo Asset Management 7.6.1.1
5.4
CVSSv3
CVE-2021-20374
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...
Ibm Maximo Asset Management 7.6.0
Ibm Maximo Asset Management 7.6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »