https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 03:04:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-58042 EUVD-2026-58042 https://cve.radiocsirt.org/vuln/euvd-2026-58042 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16755 <p>BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all versions, service packs, and patches are affected by this vulnerability. Affected SmartIT versions: 1.x, 2.0, 18.05, 18.08, and 19.02, all versions, service packs, and patches are affected by this vulnerability.</p> <p>BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all versions, service packs, and patches are affected by this vulnerability. Affected SmartIT versions: 1.x, 2.0, 18.05, 18.08, and 19.02, all versions, service packs, and patches are affected by this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-16755 https://cve.radiocsirt.org/vuln/ghsa-cq5h-qx7v-mjg5 <p>A vulnerability was discovered in BMC MyIT Digital Workplace DWP before 18.11. The DWP component sso.session.restore.cookies stores data using java serialization method. The vulnerability can be triggered by using an ivalid cookie that contains an embedded system command within a DWP API call, as demonstrated by the /dwp/rest/v2/administrator URI.</p> <p>A vulnerability was discovered in BMC MyIT Digital Workplace DWP before 18.11. The DWP component sso.session.restore.cookies stores data using java serialization method. The vulnerability can be triggered by using an ivalid cookie that contains an embedded system command within a DWP API call, as demonstrated by the /dwp/rest/v2/administrator URI.</p> https://cve.radiocsirt.org/vuln/ghsa-cq5h-qx7v-mjg5 https://cve.radiocsirt.org/vuln/gsd-2019-16755 gsd-2019-16755 https://cve.radiocsirt.org/vuln/gsd-2019-16755