CVSS2 - MEDIUM - API Security Blog

Information Disclosure

axis is vulnerable to information disclosure attacks. The vulnerability exists through the exception message after requesting for a non-existent WSDL file, leaking sensitive information.Read More ...

June 30, 2023

Important Photon OS Security Update – PHSA-2023-4.0-0406

Updates of ['linux-aws', 'linux-rt', 'openssl', 'linux-secure', 'linux'] packages of Photon OS have been released.Read More ...

June 30, 2023

Important: c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) For more ...

June 30, 2023

Access Control Bypass

github.com/grafana/grafana is vulnerable to Access Control Bypass. The vulnerability exists due to a lack of write authorization checks in `authorization.go`, which allows an attacker with the viewer ...

June 30, 2023

CVE-2017-12117

An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the re ...

June 30, 2023

CVE-2017-12115

An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to ...

June 30, 2023

Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager – Invalid Access Control

Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access ControlRead More ...

June 30, 2023

Missing Authorization

github.com/mattermost/mattermost-server is vulnerable to Missing Authorization. The vulnerability exists because the library does not verify whether the requestor is a system admin or not before allow ...

June 29, 2023

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js

## Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Node.js. ## Vulnerability Details ** CVEID: **[CVE-2023-23919]() ** DESCRIPTION: **Node.js is vuln ...

June 28, 2023

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Tivoli Netcool Configuration Manager

## Summary There are multiple vulnerabilities in IBMÂ® SDK Javaâ¢ Technology Edition, Versions 6, 8 and IBMÂ® Runtime Environment Javaâ¢ Technology Edition, Versions 6, 8 used by IBM Tivol ...

June 28, 2023