CVE Vulnerability Catalog

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component.

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers.

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a virtual host bypass vulnerability. The flaw allows bypassing controls based on virtual host configuration.

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability.

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector.

Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests with directory traversal sequences to read files outside the intended tutorial directory.

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on update and delete operations. Due to a parameter naming error, authorization does not check the lease owner, allowing any authenticated user to modify or delete leases belonging to other users.

In OpenStack Blazar before 17.0.1, the V2 lease listing operation returns leases for every project without enforcing project scoping or administrator-only policy. Any authenticated user can enumerate leases of other tenants, exposing lease IDs, reservation IDs, resource IDs, and reservation metadata.

In Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14, the get_client_ip function in saleor/account/throttling.py allows bypassing authentication attempt throttling by spoofing the client IP. The vendor considers this intended behavior, stating that XFF should be configured properly. The exploit has been publicly disclosed.

In osmo-iuh from 0.1.0 through 1.8.0, a reachable assertion was found in the ranap_handle_co_dt() function via an arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

In osmo-bsc from 1.0.1 through 1.14.1, a heap-based buffer overflow issue was found in the ipaccess_proxy_read_msg() function via IPA frame lengths. This can lead to memory corruption.

In osmo-ggsn 1.14.0, an out-of-bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory corruption.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies. An attacker can manipulate the content of log files.

Hongjing e-HR before 8.2 has a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories parameter is passed without sanitization. An unauthenticated remote attacker can use UNION SELECT to read arbitrary database content, including credential tables.

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the site_id GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization through UNION-based injection to extract sensitive data from the database.

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries via the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filters by wrapping SQL keywords in parentheses to perform UNION-based injection and extract sensitive data including administrator credential hashes.

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning.

A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to be written and kept in cleartext, without any error or warning.