Latest vulnerabilities for "ibm planning analytics"

9.8

First published (updated )

CVE-2023-42017

Path Traversal

7.7

First published (updated )

CVE-2023-30584

Node.js could allow a remote attacker to bypass security restrictions, caused by the failure to rest…

5.3

First published (updated )

CVE-2023-30582

Node.js could allow a remote attacker to bypass security restrictions. By exploiting the Worker clas…

7.5

First published (updated )

CVE-2023-30587

Node.js could allow a remote attacker to bypass security restrictions, caused by a missing check in …

7.5

First published (updated )

CVE-2023-30583

Node.js could allow a remote attacker to gain elevated privileges on the system, caused by an error …

7.5

First published (updated )

CVE-2023-30585

Node.js could allow a remote attacker to obtain sensitive information, caused by the failure to rest…

5.3

First published (updated )

CVE-2023-32005

Path Traversal

7.5

First published (updated )

CVE-2023-32558

Path Traversal

5.3

First published (updated )

CVE-2023-32003

Path Traversal

8.8

First published (updated )

CVE-2023-32004

Node.js could allow a remote attacker to bypass security restrictions, caused by the use of Module._…

9.8

First published (updated )

CVE-2023-32002

Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.

9.8

First published (updated )

CVE-2023-34478

Heap overflow issue with the Lua cjson library used by Redis

8.8

First published (updated )

CVE-2022-24834

Last updated 24 July 2024

7.5

First published (updated )

CVE-2023-30590

Node.js could allow a remote attacker to bypass security restrictions, caused by an error in the cry…

7.5

First published (updated )

CVE-2023-30586

A vulnerability has been discovered in Node.js, where the use of proto in process.mainModule.proto.…

7.5

First published (updated )

CVE-2023-30581

`HINCRBYFLOAT` can be used to crash a redis-server process

6.5

First published (updated )

CVE-2023-28856

Integer Overflow in several Redis commands can lead to denial of service.

6.5

First published (updated )

CVE-2023-25155

Redis string pattern matching can be abused to achieve Denial of Service

5.5

First published (updated )

CVE-2022-36021

Integer overflow in multiple Redis commands can lead to denial-of-service

5.5

First published (updated )

CVE-2023-22458

Integer overflow in certain command arguments can drive Redis to OOM panic

5.5

First published (updated )

CVE-2022-35977

Removal of TrustCor root certificate

7.5

First published (updated )

CVE-2022-23491

Regular Expression Denial of Service (ReDoS)

7.5

First published (updated )

CVE-2022-25758

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

5.3

First published (updated )

CVE-2022-33987

Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource

9.3

First published (updated )

CVE-2022-1650

Sandbox Bypass

9.8

First published (updated )

CVE-2022-23923

IBM Planning Analytics1 vulnerability

First published (updated )

IBM-6986639

XSS

6.4

First published (updated )

CVE-2023-28520

IBM Planning AnalyticsSSRF