https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:32:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-00806 bdu:2022-00806 https://cve.radiocsirt.org/vuln/bdu:2022-00806 https://cve.radiocsirt.org/vuln/cnvd-2022-08208 cnvd-2022-08208 https://cve.radiocsirt.org/vuln/cnvd-2022-08208 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38892 <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none</p> <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-38892 https://cve.radiocsirt.org/vuln/ghsa-f29f-76w7-jhxr <p>IBM Planning Analytics 2.0 and IBM Planning Analytics Workspace 2.0 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote threat actor who can access (without previous authentication) a valid PA endpoint to read and write files to the IBM Planning Analytics system. Depending on file system permissions up to path traversal and possibly remote code execution. IBM X-Force ID: 209511.</p> <p>IBM Planning Analytics 2.0 and IBM Planning Analytics Workspace 2.0 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote threat actor who can access (without previous authentication) a valid PA endpoint to read and write files to the IBM Planning Analytics system. Depending on file system permissions up to path traversal and possibly remote code execution. IBM X-Force ID: 209511.</p> https://cve.radiocsirt.org/vuln/ghsa-f29f-76w7-jhxr https://cve.radiocsirt.org/vuln/gsd-2021-38892 gsd-2021-38892 https://cve.radiocsirt.org/vuln/gsd-2021-38892