Show filters
66 Total Results
Displaying 21-30 of 66
Sort by:
Attacker Value
Unknown

CVE-2021-42297

Disclosure Date: November 24, 2021 (last updated February 23, 2025)
Windows 10 Update Assistant Elevation of Privilege Vulnerability
0
Attacker Value
Unknown

CVE-2021-29844

Disclosure Date: October 25, 2021 (last updated February 23, 2025)
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Attacker Value
Unknown

CVE-2021-36945

Disclosure Date: August 12, 2021 (last updated February 23, 2025)
Windows 10 Update Assistant Elevation of Privilege Vulnerability
0
Attacker Value
Unknown

CVE-2020-5004

Disclosure Date: July 27, 2021 (last updated February 23, 2025)
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192957.
Attacker Value
Unknown

CVE-2020-4974

Disclosure Date: July 27, 2021 (last updated February 23, 2025)
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
Attacker Value
Unknown

CVE-2021-20507

Disclosure Date: July 16, 2021 (last updated February 23, 2025)
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198235.
Attacker Value
Unknown

CVE-2018-25016

Disclosure Date: June 21, 2021 (last updated February 22, 2025)
Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.
Attacker Value
Unknown

CVE-2019-25047

Disclosure Date: June 21, 2021 (last updated February 22, 2025)
Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.
Attacker Value
Unknown

CVE-2021-20518

Disclosure Date: March 29, 2021 (last updated February 22, 2025)
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437.
Attacker Value
Unknown

CVE-2021-20520

Disclosure Date: March 29, 2021 (last updated February 22, 2025)
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.