DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
IBM SPSS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-03-16
Ein Angreifer kann mehrere Schwachstellen in IBM SPSS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu manipulieren.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-27904US | — | — | ||
minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4… | ||||
| CVE-2026-27903US | — | — | ||
minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3… | ||||
| CVE-2026-26996US | high7.5 | — | ||
minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Ser… | ||||
| CVE-2026-22030US | — | — | ||
React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router (or Remix v2) is vulnerable to CSRF at… | ||||
| CVE-2026-22029US | medium6.1 | — | ||
React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects… | ||||
| CVE-2026-21884US | — | — | ||
React Router is a router for React. In @remix-run/react version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, a XSS vulnerability exists in in React Router's <ScrollResto… | ||||
| CVE-2025-68470US | — | — | ||
React Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so that when a React Router application navig… | ||||
| CVE-2025-59057US | — | Exploit | ||
React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router… | ||||
| CVE-2025-64718US | — | — | ||
js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document vi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory RHSA-2026:18054 vom 2026-05-18external
- Red Hat Security Advisory RHSA-2026:7670 vom 2026-04-13external
- SUSE Security Update SUSE-SU-2026:21111-1 vom 2026-04-16external
- WID-SEC-W-2026-0752 - CSAF Versionself
- WID-SEC-2026-0752 - Portal Versionself
- IBM Security Bulletin vom 2026-03-16external
- IBM Security Bulletin 7267856 vom 2026-03-27external
- IBM Security Bulletin 7271910 vom 2026-05-06external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan