ROS-20250827-06

🗓️ 27 Aug 2025 00:00:00Reported by RedosType

Node.js pbkdf2 input validation flaw lets remote attacker forge signature via crafted packets.

Reporter	Title	Published	Views	Family All 80
IBM Security Bulletins	Security Bulletin: Vulnerabilities in pbkdf2 affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Sep 202511:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in QRadar Suite Software	13 Mar 202619:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Log Source Management app for IBM QRadar SIEM includes components with known vulnerabilities	15 Aug 202514:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in pbkdf2 affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-6545 and CVE-2025-6547)	3 Sep 202508:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to loss of confidentiality [CVE-2025-6545] [CVE-2025-6547]	26 Jun 202516:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in pbkdf2-3.1.2.tgz	22 Oct 202511:24	–	ibm
ATTACKERKB	CVE-2025-6547	23 Jun 202519:00	–	attackerkb
BDU FSTEC	The vulnerability of the pbkdf2 library in the Node.js software platform, which allows attackers to forge digital signatures	25 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the pbkdf2 library in the Node.js software platform, which allows attackers to forge digital signatures	25 Jun 202500:00	–	bdu_fstec
Chainguard	CVE-2025-6545 vulnerabilities	3 Jul 202620:22	–	cgr