Latest vulnerabilities for "ibm ibm® engineering requirements management doors web access" 9.7.2.7

5.1

First published (updated )

CVE-2023-50305

IBM Engineering Requirements Management cross-site scripting

4.8

First published (updated )

CVE-2023-28525

IBM Engineering Requirements Management cross-site request forgery

6.5

First published (updated )

CVE-2023-28949

IBM Common Licensing information disclosure

First published (updated )

CVE-2023-50306

Apache Tomcat: Leaking of unrelated request bodies in default error page

7.5

EPSS

0.69%

First published (updated )

CVE-2024-21733

Apache Tomcat: Trailer header parsing too lenient

5.3

First published (updated )

CVE-2023-45648

Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

5.3

First published (updated )

CVE-2023-42795

Missing upper bound check on chunk length in snappy-java

7.5

First published (updated )

CVE-2023-43642

Race Condition

5.9

First published (updated )

CVE-2023-28320

Use After Free

7.5

First published (updated )

CVE-2023-28319

Use After Free, Double Free

7.5

First published (updated )

CVE-2023-27537

cURL libcurl could allow a local attacker to bypass security restrictions, caused by a SSH connectio…

5.5

First published (updated )

CVE-2023-27538

cURL libcurl could allow a remote attacker to bypass security restrictions, caused by a GSS delegati…

5.9

First published (updated )

CVE-2023-27536

cURL libcurl could allow a remote attacker to bypass security restrictions, caused by a FTP too eage…

5.9

First published (updated )

CVE-2023-27535

Path Traversal

8.8

First published (updated )

CVE-2023-27534

Input Validation

8.8

First published (updated )

CVE-2023-27533

Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …

7.5

First published (updated )

CVE-2023-23915

Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …

9.1

First published (updated )

CVE-2023-23914

Use After Free

5.9

First published (updated )

CVE-2022-43552

curl. Multiple issues were addressed by updating curl.

7.5

First published (updated )

CVE-2022-43551

Apache Tomcat request smuggling via malformed content-length

7.5

First published (updated )

CVE-2022-42252

Apache Tomcat: Information disclosure

5.3

First published (updated )

CVE-2021-43980

Scala could allow a remote authenticated attacker to execute arbitrary code on the system, caused by…

9.8

First published (updated )

CVE-2022-36944

Authentication Bypass Vulnerability

9.8

First published (updated )

CVE-2022-32532

Cross-site Scripting in CKEditor4

5.4

First published (updated )

CVE-2022-24728

Regular expression Denial of Service in dialog plugin

7.5

First published (updated )

CVE-2022-24729

HTML comments vulnerability allowing to execute JavaScript code

8.2

First published (updated )

CVE-2021-41165

Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

8.2

First published (updated )

CVE-2021-41164

Execution of JavaScript code using malformed HTML in ckeditor

7.3

First published (updated )

CVE-2021-37695

Apache Tomcat h2c request mix-up

7.5

First published (updated )

CVE-2021-25122

Infoleak

9.1

First published (updated )

CVE-2021-27568

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim …

7.5

First published (updated )

CVE-2021-26271

Apache Tomcat: Request header mix-up between HTTP/2 streams

7.5

First published (updated )

CVE-2020-17527

XSS

6.1

First published (updated )

CVE-2020-27193

Infoleak

5.3

First published (updated )

CVE-2020-13943

Input Validation

5.3

First published (updated )

CVE-2020-14338

Null Pointer Dereference