Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
disclosure management vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2016-9715
IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo...
Ibm Infosphere Master Data Management Server 11.0
Ibm Infosphere Master Data Management Server 11.4
Ibm Infosphere Master Data Management Server 11.6
Ibm Infosphere Master Data Management Server 11.3
Ibm Infosphere Master Data Management Server 11.5
3.5
CVSSv2
CVE-2020-11838
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x before 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
Microfocus Arcsight Management Center
Microfocus Arcsight Management Center 2.6.1
7.8
CVSSv2
CVE-2013-4786
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote malicious users to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
Oracle Fujitsu M10 Firmware
Intel Intelligent Platform Management Interface 2.0
1 EDB exploit
1 Github repository
4.3
CVSSv2
CVE-2020-4920
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...
Ibm Collaborative Lifecycle Management 6.0.2
Ibm Collaborative Lifecycle Management 6.0.6
Ibm Collaborative Lifecycle Management 6.0.6.1
Ibm Doors Next 7.0.0
Ibm Doors Next 7.0.1
Ibm Doors Next 7.0.2
Ibm Engineering Insights 7.0.0
Ibm Engineering Insights 7.0.1
Ibm Engineering Insights 7.0.2
Ibm Engineering Lifecycle Management 7.0.0
Ibm Engineering Lifecycle Management 7.0.1
Ibm Engineering Lifecycle Management 7.0.2
Ibm Engineering Requirements Management Doors Next 6.0.2
Ibm Engineering Requirements Management Doors Next 6.0.6
Ibm Engineering Requirements Management Doors Next 6.0.6.1
Ibm Engineering Test Management 7.0.0
Ibm Engineering Test Management 7.0.1
Ibm Engineering Test Management 7.0.2
Ibm Engineering Workflow Management 7.0.0
Ibm Engineering Workflow Management 7.0.1
Ibm Engineering Workflow Management 7.0.2
Ibm Rational Engineering Lifecycle Manager 6.0.2
4
CVSSv2
CVE-2022-28063
Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.
Simple Bakery Shop Management System Project Simple Bakery Shop Management System 1.0
NA
CVE-2023-26774
An issue found in Sales Tracker Management System v.1.0 allows a remote malicious user to access sensitive information via sales.php component of the admin/reports endpoint.
Sales Tracker Management System Project Sales Tracker Management System 1.0
NA
CVE-2022-35714
IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management 7.6.1.2
4.3
CVSSv2
CVE-2020-3150
A vulnerability in the web-based management interface of Cisco Small Business RV110W and RV215W Series Routers could allow an unauthenticated, remote malicious user to download sensitive information from the device, which could include the device configuration. The vulnerability ...
Cisco Rv110w Firmware
Cisco Rv215w Firmware
3.5
CVSSv2
CVE-2020-4223
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
Ibm Maximo Asset Management 7.6.0.10
Ibm Maximo Asset Management 7.6.1.1
NA
CVE-2022-43866
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session....
Ibm Maximo Asset Management 7.6.1.2
Ibm Maximo Asset Management 7.6.1.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »