CVE Vulnerability Catalog

IBM WebSphere Application Server versions 9.0 and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive information by sending a crafted unauthenticated request.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a reflected cross-site scripting vulnerability.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet.

The ITE it82xx2 USB device-controller driver (drivers/usb/udc/udc_it82xx2.c) initializes its bus-suspend detection work item with k_work_init_delayable() inside it82xx2_enable(). Because it82xx2_disable() does not cancel the work, a disable-then-enable cycle re-initializes the still-pending work in place, corrupting kernel timeout/workqueue linked lists and causing a kernel panic.

The ITE IT82xx2 USB device-controller driver (udc_it82xx2.c) mishandles multi-packet OUT transfers on non-control endpoints. A buffer that is still being filled by DMA may be submitted to the upper USB stack, leading to use-after-free and double-free conditions.

Zephyr's TLS socket layer (subsys/net/lib/sockets/sockets_tls.c) keeps a process-global client_cache array of cached client session buffers shared by every TLS socket, with access serialized only by the per-socket ctx->lock mutex. Because CONFIG_NET_SOCKETS_TLS_MAX_CLIENT_SESSION_COUNT defaults to 1, two concurrent client sockets contend for the same slot, causing a use-after-free read and a double-free when two saves evict the same entry. This corrupts the mbedTLS heap; the fix adds a dedicated session_cache_lock mutex taken across every accessor of client_cache.

IBM WebSphere Application Server 9.0 and 8.5 is affected by blind server-side request forgery when processing SOAP requests.

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling caused by improper parsing of the HTTP transfer-encoding request header. An attacker could poison the web cache, bypass web application firewall protection, and conduct XSS attacks.

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 could allow a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted website, an attacker could spoof the displayed URL to redirect a user to a malicious site that appears trusted.

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling caused by improper parsing of the HTTP transfer-encoding request header. An attacker could send a specially crafted header to poison the web cache, bypass web application firewall protection, and conduct XSS attacks.

A vulnerability was found in cosmicstack-labs mercury-agent up to 1.2.0, affecting the checkShellCommand function in src/capabilities/permissions.ts. Manipulation leads to incorrect privilege assignment, and the attack can be initiated remotely. The exploit has been publicly disclosed.

A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.13, affecting the PermissionManager.checkShellCommand function in mercury-agent/src/capabilities/permissions.ts. Manipulation leads to improper authorization, and the attack can be initiated remotely. The exploit has been publicly disclosed.

A vulnerability was found in HKUDS nanobot up to 0.2.1, affecting the ExecTool._guard_command and ExecTool._spawn functions in nanobot/agent/tools/shell.py. The manipulation causes an incomplete blacklist, allowing remote attacks. A patch is available with name af582246f141311d574551b7571a517bcc3df750.

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction. An attacker can write files outside the container root by supplying a crafted image with symlinks pointing to arbitrary paths. Via /container/add, this allows root-privileged file creation, directory creation, file deletion via overlayfs whiteout, and hardlink creation on the persistent data partition without starting the container. The 7.23.x long-term branch does not contain the fix.

Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vulnerability that allows authenticated low-privileged attackers to bypass enforced two-factor authentication indefinitely by exploiting an unguarded code path in the profile-page update handler.

IBM Common Licensing Agent 9.0, 9.0.0.1, 9.0.0.2 and ART 9.0, 9.0.0.1, 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit unauthorized values, potentially resulting in unintended application behavior.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configuration. This could allow attackers to upload files onto the system to places the Navigator support did not intend, but only if the profile could already do that by itself.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition during the WebSocket handshake process.