Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2025-01-28 CVE-2023-50316 SQL Injection vulnerability in IBM Sterling B2B Integrator
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 is vulnerable to SQL injection.
network
low complexity
ibm CWE-89
critical
9.8
2025-01-28 CVE-2024-27263 Man-in-the-Middle vulnerability in IBM Sterling B2B Integrator
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man in the middle techniques.
network
high complexity
ibm CWE-300
5.3
2025-01-28 CVE-2024-28786 IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques.
low complexity
CWE-319
6.5
2025-01-27 CVE-2024-37526 IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism.
network
low complexity
CWE-497
6.5
2025-01-27 CVE-2024-44172 Unspecified vulnerability in Apple Macos
A privacy issue was addressed with improved private data redaction for log entries.
local
low complexity
apple
3.3
2025-01-27 CVE-2024-54468 Unspecified vulnerability in Apple products
The issue was addressed with improved checks.
local
low complexity
apple
8.2
2025-01-27 CVE-2024-54475 Unspecified vulnerability in Apple Macos
A privacy issue was addressed with improved private data redaction for log entries.
local
low complexity
apple
3.3
2025-01-27 CVE-2024-54478 Out-of-bounds Read vulnerability in Apple products
An out-of-bounds access issue was addressed with improved bounds checking.
network
low complexity
apple CWE-125
6.5
2025-01-27 CVE-2024-54488 Unspecified vulnerability in Apple Iphone OS
A logic issue was addressed with improved file handling.
network
low complexity
apple
5.3
2025-01-27 CVE-2024-54497 Unspecified vulnerability in Apple products
The issue was addressed with improved checks.
network
low complexity
apple
6.5