Security Bulletin: IBM Db2 Web Query for i is vulnerable to arbitrary code execution due to Apache Commons Text [CVE-2022-42889]

Summary Db2 Web Query is vulnerable to arbitrary code execution due to Apache Commons Text CVE-2022-42889. Apache Commons Text is used by IBM Db2 Web Query for i for string functionality. The fix includes Apache Commons Text 1.10.0. Vulnerability Details CVEID:CVE-2022-42889 DESCRIPTION: Apache...

PT-2023-34920 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue concerns a sanity check on i extra isize in the is alive function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to HTTP header injection and affected by denial of services due to multiple vulnerabilities.

Summary IBM WebSphere Application Server Liberty for IBM i is vulnerable to an HTTP header injection caused by improper validation, and affected by a denial of service in GraphQL Java, a denial of service in CyberNeko HTML, and a denial of service in protobuf-java as described in the vulnerabilit...

CVE-2023-22326

In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iControl REST and TMOS shell tmsh dig command which...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 iControl REST and TMSH have improper privilege management, and an authenticated attacker with resource administrator role...

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

Design/Logic Flaw

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

i-librarian 代码问题漏洞

i-librarian is an online service from Martin Kucej Personal Developer that will organize your PDF files and office document collections. A security vulnerability exists in i-librarian version 4.10, which stems from an arbitrary file upload vulnerability in ajaxsupplement.php...

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

CVE-2022-47854

CVE-2022-47854 affects i-librarian 4.10 and involves an Arbitrary file upload vulnerability in ajaxsupplement.php . The incident is categorized as a high‑impact issue (CVSS v3.1: 9.8, Critical, Network attack vector, no user interaction). Root cause details are not fully disclosed in the connecte...

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

Malicious code in karma-i-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7925e09531fca797d5e885bb3eb62947464435339f718d7e3c1bb97dbd311740 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-549 Malicious code in karma-jasmine-i-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed0afb956ba7f377036f0c8ef4717a97760b7a00263c1d791ec61995e323cbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-547 Malicious code in karma-i-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7925e09531fca797d5e885bb3eb62947464435339f718d7e3c1bb97dbd311740 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-548 Malicious code in karma-jasmine-i-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e549b03e79b04aa24627294bb5599da9fb989a712bfbe3a6048c97bed62778b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

virtio-win bug fix and enhancement update

An update is available for virtio-win. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...

GSD-2023-1000977 scsi: qla2xxx: Fix crash when I/O abort times out

scsi: qla2xxx: Fix crash when I/O abort times out This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000532 scsi: qla2xxx: Fix crash when I/O abort times out

scsi: qla2xxx: Fix crash when I/O abort times out This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

AMD System Management Unit(SMU) 输入验证错误漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation and could allow a physical attacker to disclose the contents of memory over the I2C bus,...