Security Intel Hub 160+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

Clear filters

IBM Jazz Team Server Local File Read Vulnerability (CVE-2021-20551) and Remediation

www.ibm.com · 2025-11-06

**Key Vulnerability Information from the Screenshot:** - **CVE ID:** CVE-2021-20551 - **Description:** IBM Jazz Foundation allows web pages to be stored locally, which can be read by another user on t…

IBM InfoSphere MDM Reference Data Management Hub Plaintext Credential Storage (CVE-2017-1309)

www.ibm.com · 2025-11-06

### Critical Vulnerability Information - **CVE ID:** CVE-2017-1309 - **Vulnerability Description:** IBM InfoSphere Master Data Management Reference Data Management Hub stores user credentials in plain…

IBM MQ Remote Denial of Service via SIGSEGV (CVE-2018-1371)

www.ibm.com · 2025-11-06

**Summary** An IBM MQ client connecting to an MQ queue manager can cause a SIGSEGV in the queue manager's amqrmppa channel process, terminating it. **Vulnerability Details** - **CVEID**: CVE-2018-1371…

CVSS 7.2

IBM Sterling Connect:Direct Privilege Escalation Vulnerability CVE-2025-36137 Advisory

www.ibm.com · 2025-10-31

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2025-36137 - **Description**: IBM Sterling Connect:Direct for UNIX incorrectly assigns permissions to the Control C…

CVSS 6.5

IBM Db2 High Performance Unload Vulnerability Advisory: Buffer Overflow & Out-of-Bounds Write (CVE-2023-33126, CVE-2025-

www.ibm.com · 2025-10-28

### Critical Vulnerability Information #### Vulnerability Overview - **CVE IDs**: CVE-2023-33126, CVE-2023-33131, CVE-2025-33132, CVE-2025-33133 - **Description**: Common vulnerabilities found in IBM …

CVSS 5.5

CVE-2025-36002: IBM Sterling B2B Integrator Password in Config File

www.ibm.com · 2025-10-17

### Key Information #### Vulnerability Overview - **CVE ID**: CVE-2025-36002 - **Description**: IBM Sterling B2B Integrator and IBM Sterling File Gateway store user credentials in configuration files …

CVSS 5.3

IBM Aspera Faspex 5 Multiple Vulnerabilities Advisory (CVE-2023-5893/5874)

www.ibm.com · 2025-10-10

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: Multiple CVEs, including CVE-2023-5893, CVE-2023-5874, etc. - **Product**: IBM Aspera Faspex 5 - **Version**: 5.0.14 an…

CVSS 9.3

IBM Security Verify Access Multiple Vulnerabilities (CVE-2025-36354/36355/36356) Advisory

www.ibm.com · 2025-10-07

### Key Information #### Vulnerability Overview - **CVE IDs**: CVE-2025-36354, CVE-2025-36355, CVE-2025-36356 - **Affected Products**: - IBM Security Verify Access - IBM Verify Identity Access #### Vu…

CVSS 6.4

IBM License Metric Tool Stored XSS and API Bypass Vulnerabilities (CVE-2025-36352/36351)

www.ibm.com · 2025-09-30

### Critical Vulnerability Information #### Vulnerability Details - **CVE ID**: CVE-2025-36352 - **Description**: IBM License Metric Tool contains a stored cross-site scripting (XSS) vulnerability. Th…

CVSS 7.5

IBM Aspera HTTP Gateway Multiple CVEs Advisory: Info Disclosure, DoS, Proxy Bypass

www.ibm.com · 2025-09-27

### Critical Vulnerability Information #### Vulnerability Details - **CVE-2025-36274** - **Description**: IBM Aspera HTTP Gateway stores sensitive information in cleartext within files that are easily…

CVSS 6.4

IBM HMC Stored XSS Vulnerability (CVE-2025-36125) Advisory and Patch Details

www.ibm.com · 2025-09-11

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2025-36125 - **Description**: IBM Hardware Management Console (HMC) contains a stored cross-site scripting (XSS) vu…

CVSS 6.5

IBM Jazz Foundation Relative Path Traversal Vulnerability (CVE-2025-25048) Advisory

www.ibm.com · 2025-09-05

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2025-25048 - **Description**: IBM Jazz Foundation contains a relative path traversal vulnerability that allows auth…

CVSS 6.1

IBM Jazz Foundation Unauthenticated XSS Vulnerability (CVE-2024-43184) Advisory

www.ibm.com · 2025-09-05

### Key Information #### Vulnerability Overview - **CVE ID**: CVE-2024-43184 - **Description**: IBM Jazz Foundation contains a Cross-Site Scripting (XSS) vulnerability that allows unauthenticated atta…

CVSS 5.9

IBM App Connect Enterprise Sensitive Info Disclosure in Logs (CVE-2025-36133)

www.ibm.com · 2025-09-03

### Critical Vulnerability Information #### Vulnerability Details - **CVE-2025-7338** - **Description**: Multer is a Node.js middleware for handling `multipart/form-data`. From versions 1.4.4-1 to 2.0…

CVSS 6.1

IBM Concert Software Multiple Vulnerabilities (CVE-2022-41856-41867) Advisory

www.ibm.com · 2025-09-02

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: Multiple CVEs, including CVE-2022-41856, CVE-2022-41857, etc. - **Description**: Multiple security vulnerabilities exis…

CVSS 5.4

IBM Watson Studio Local Multiple Vulnerabilities Advisory (RCE/LPE/Info Disclosure)

www.ibm.com · 2025-08-29

### Critical Vulnerability Information #### Vulnerability Overview - **Title**: Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio Local for Data (was IBM SPSS Modeler Server) - *…

CVSS 7.8

IBM Cognos Command Center & Java SE Multiple Vulnerabilities Advisory (CVE-2025-1494, RCE, Buffer Overflow)

www.ibm.com · 2025-08-28

### Critical Vulnerability Information #### Vulnerability Overview - **CVE-2025-1494**: IBM Cognos Command Center contains multiple vulnerabilities, including clickjacking and arbitrary code execution…

Premium intel

CVSS 9.8

CVE-2025-36157: IBM Jazz Team Server Unauthenticated DoS Vulnerability

www.ibm.com · 2025-08-25

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2025-36157 - **Description**: IBM Jazz Team Server allows unauthorized remote attackers to update server configurat…

CVSS 8.8

IBM Storage Virtualize SSH Privilege Escalation Vulnerability (CVE-2023-36120) and Patch Details

www.ibm.com · 2025-08-19

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2023-36120 - **Description**: An SSH authorization vulnerability in IBM Storage Virtualize products may lead to pri…

CVSS 5.3

IBM WebSphere Liberty HTTP/2 DoS Vulnerability (CVE-2025-36047) Advisory

www.ibm.com · 2025-08-15

### Key Information #### Vulnerability Overview - **CVE ID**: CVE-2025-36047 - **Description**: IBM WebSphere Application Server Liberty is vulnerable to a Denial of Service (DoS) attack when the HTTP…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 160+