Emc Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, Emc Networker Virtual Edition (nve) 9.0.x, 9.1.x, 9.2.x, Emc Integrated Data Protection Appliance 2.0 Security Vulnerabilities

CVE-2023-5678 affecting package openssl for versions less than 1.1.1k-28

CVE-2023-5678 affecting package openssl for versions less than 1.1.1k-28. A patched version of the package is...

CVE-2023-44487 affecting package kubernetes for versions less than 1.28.3-1

CVE-2023-44487 affecting package kubernetes for versions less than 1.28.3-1. A patched version of the package is...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2

CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2. A patched version of the package is...

CVE-2023-39325 affecting package golang for versions less than 1.20.7-2

CVE-2023-39325 affecting package golang for versions less than 1.20.7-2. A patched version of the package is...

CVE-2023-25675 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25675 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-25667 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25667 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-29404 affecting package golang for versions less than 1.20.7-1

CVE-2023-29404 affecting package golang for versions less than 1.20.7-1. A patched version of the package is...

CVE-2023-29405 affecting package msft-golang for versions less than 1.20.7-1

CVE-2023-29405 affecting package msft-golang for versions less than 1.20.7-1. A patched version of the package is...

CVE-2023-24534 affecting package msft-golang for versions less than 1.20.7-1

CVE-2023-24534 affecting package msft-golang for versions less than 1.20.7-1. A patched version of the package is...

CVE-2023-24538 affecting package msft-golang for versions less than 1.20.11-1

CVE-2023-24538 affecting package msft-golang for versions less than 1.20.11-1. A patched version of the package is...

CVE-2023-24534 affecting package golang for versions less than 1.20.7-1

CVE-2023-24534 affecting package golang for versions less than 1.20.7-1. A patched version of the package is...

CVE-2022-4904 affecting package rubygem-mini_portile2 2.8.0-1

CVE-2022-4904 affecting package rubygem-mini_portile2 2.8.0-1. No patch is available...

CVE-2022-3857 affecting package libpng for versions less than 1.6.39-1

CVE-2022-3857 affecting package libpng for versions less than 1.6.39-1. No patch is available...

CVE-2019-15485 affecting package bolt 0.9.2-2

CVE-2019-15485 affecting package bolt 0.9.2-2. This CVE either no longer is or was never...

CVE-2022-41724 affecting package msft-golang for versions less than 1.19.6-1

CVE-2022-41724 affecting package msft-golang for versions less than 1.19.6-1. A patched version of the package is...

CVE-2022-41724 affecting package gcc 11.2.0-8

CVE-2022-41724 affecting package gcc 11.2.0-8. This CVE either no longer is or was never...

CVE-2023-0286 affecting package reaper 3.1.1-6

CVE-2023-0286 affecting package reaper 3.1.1-6. This CVE either no longer is or was never...

CVE-2023-22605 affecting package binutils 2.37-8

CVE-2023-22605 affecting package binutils 2.37-8. This CVE either no longer is or was never...

CVE-2023-22603 affecting package binutils 2.37-8

CVE-2023-22603 affecting package binutils 2.37-8. This CVE either no longer is or was never...

CVE-2022-4543 affecting package kernel 5.15.160.1-1

CVE-2022-4543 affecting package kernel 5.15.160.1-1. No patch is available...

CVE-2022-3437 affecting package samba 4.12.5-6

CVE-2022-3437 affecting package samba 4.12.5-6. No patch is available...

CVE-2022-46456 affecting package nasm for versions less than 2.16-1

CVE-2022-46456 affecting package nasm for versions less than 2.16-1. No patch is available...

CVE-2021-46023 affecting package rust 1.72.0-7

CVE-2021-46023 affecting package rust 1.72.0-7. This CVE either no longer is or was never...

CVE-2023-22466 affecting package rpm-ostree 2022.1-6

CVE-2023-22466 affecting package rpm-ostree 2022.1-6. This CVE either no longer is or was never...

CVE-2022-42898 affecting package samba 4.12.5-6

CVE-2022-42898 affecting package samba 4.12.5-6. No patch is available...

CVE-2022-4603 affecting package ppp 2.4.7-36

CVE-2022-4603 affecting package ppp 2.4.7-36. No patch is available...

CVE-2022-2989 affecting package podman 4.1.1-5

CVE-2022-2989 affecting package podman 4.1.1-5. This CVE either no longer is or was never...

CVE-2022-38457 affecting package kernel 5.15.160.1-1

CVE-2022-38457 affecting package kernel 5.15.160.1-1. No patch is available...

CVE-2022-38751 affecting package snakeyaml 1.25-2

CVE-2022-38751 affecting package snakeyaml 1.25-2. This CVE either no longer is or was never...

CVE-2022-32742 affecting package samba 4.12.5-6

CVE-2022-32742 affecting package samba 4.12.5-6. No patch is available...

CVE-2021-33468 affecting package yasm 1.3.0-15

CVE-2021-33468 affecting package yasm 1.3.0-15. No patch is available...

CVE-2021-33466 affecting package yasm 1.3.0-15

CVE-2021-33466 affecting package yasm 1.3.0-15. No patch is available...

CVE-2021-33465 affecting package yasm 1.3.0-15

CVE-2021-33465 affecting package yasm 1.3.0-15. No patch is available...

CVE-2021-33461 affecting package yasm 1.3.0-15

CVE-2021-33461 affecting package yasm 1.3.0-15. No patch is available...

CVE-2021-33459 affecting package yasm 1.3.0-15

CVE-2021-33459 affecting package yasm 1.3.0-15. No patch is available...

CVE-2021-33456 affecting package yasm 1.3.0-15

CVE-2021-33456 affecting package yasm 1.3.0-15. No patch is available...

CVE-2023-25136 affecting package openssh 8.9p1-5

CVE-2023-25136 affecting package openssh 8.9p1-5. This CVE either no longer is or was never...

CVE-2023-44487 affecting package containerized-data-importer for versions less than 1.55.0-15

CVE-2023-44487 affecting package containerized-data-importer for versions less than 1.55.0-15. A patched version of the package is...

Exploit for CVE-2024-6387

Qualys Security Advisory regreSSHion: RCE in OpenSSH's server,...

Exploit for CVE-2024-6387

OpenSSH CVE-2024-6387 Vulnerability Checker This Python script...

Exploit for CVE-2024-6387

Link to Qualys Write-Up:...

Exploit for CVE-2024-6387

OpenSSH CVE-2024-6387 Vulnerability Checker Overview...

Security Bulletin: Security vulnerabilities may affect IBM WebSphere Application Server Liberty shipped with with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the issues. Vulnerability Details ** CVEID: CVE-2024-25026 DESCRIPTION: **IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere...

Security Bulletin: TSSC/IMC is vulnerable to aritrary code execution due to Linux Kernel

Summary TSSC/IMC is vulnerable to arbitrary code execution due to Linux Kernel. A patch that updates the Kernel library has been provided. CVE-2023-2002, CVE-2023-3090, CVE-2023-3390, CVE-2023-3776, CVE-2023-4004, CVE-2023-20593, CVE-2023-35001, CVE-2023-35788. Vulnerability Details ** CVEID:...

Security Bulletin: TSSC/IMC is vulnerable to arbitrary code execution due to systemd

Summary TSSC/IMC is vulnerable to arbitrary code execution due to systemd. A patch has been provided that updates the systemd library. CVE-2023-26604. Vulnerability Details ** CVEID: CVE-2023-26604 DESCRIPTION: **systemd could allow a local authenticated attacker to gain elevated privileges on...

Tuesday, July 2, 2024 Security Releases

Summary The Node.js project will release new versions of the 22.x, 20.x, 18.x releases lines on or shortly after, Tuesday, July 2, 2024 in order to address: 1 high severity issues. 1 medium severity issues. 3 low severity issues. Node.js fetch will be upgraded to undici v6.19.2 on Node.js 18.x...

Imperva Client-Side Protection Mitigates the Polyfill Supply Chain Attack

The recent discovery of a website supply chain attack using the cdn.polyfill.io domain has left many websites vulnerable to malicious code injection. Once a trusted resource for adding JavaScript polyfills to websites, the domain has recently become the epicenter of a significant website supply...

CVE-2024-39309

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A vulnerability in versions prior to 6.5.7 and 7.1.0 allows SQL injection when Parse Server is configured to use the PostgreSQL database. The algorithm to detect SQL injection has been improved.....