Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Service Registry and Repository due to October 2022 CPU and January 2023 CPU plus deferred CVE-2022-21426 and CVE-2022-3676

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by WebSphere Service Registry and Repository. These issues were disclosed as part of the IBM Java SDK updates in October 2022 and January 2023. These issues are addressed by WebSphere Application Server shipped...

CVE-2023-2195

creationtimestamp| type| source ---|---|--- 2023-05-16 22:30:49+00:00| seen| https://t.me/cibsecurity/64256 2025-01-22 21:02:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2649...

CVE-2023-31131

creationtimestamp| type| source ---|---|--- 2023-05-16 02:29:59+00:00| seen| https://t.me/cibsecurity/64181 2025-01-22 22:02:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2673...

CVE-2023-32068

creationtimestamp| type| source ---|---|--- 2023-05-16 00:29:48+00:00| seen| https://t.me/cibsecurity/64169 2025-01-22 22:02:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2669...

CVE-2023-32306

creationtimestamp| type| source ---|---|--- 2023-05-12 22:27:03+00:00| seen| https://t.me/cibsecurity/64050...

CVE-2023-29022

creationtimestamp| type| source ---|---|--- 2023-05-11 22:20:38+00:00| seen| https://t.me/cibsecurity/63913...

CVE-2023-31126

creationtimestamp| type| source ---|---|--- 2023-05-09 16:38:41+00:00| seen| https://t.me/cibsecurity/63602 2025-08-20 21:00:17+00:00| published-proof-of-concept| Telegram/rkfoWjAqSXezgJulzvtFuydB0ZkPEuMJMmDny8QUUYeolaE 2025-08-22 21:02:34+00:00| seen|...

CVE-2023-23536

creationtimestamp| type| source ---|---|--- 2023-05-09 00:38:19+00:00| seen| https://t.me/cibsecurity/63475 2023-07-22 09:08:30+00:00| exploited| https://t.me/WARLOCKDARKARMYOFFICIALS/2772...

Siemens SCALANCE LPE9403

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SICAM P850 and P855 Devices Session Fixation (CVE-2022-40226)

A vulnerability has been identified in SICAM P850 All versions V3.10, SICAM P855 All versions V3.10. Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user's session after login. This plug...

Siemens SIMATIC Cloud Connect 7

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SICAM P850 and SICAM P855 Improper Neutralization of Parameter/Argument Delimiters (CVE-2022-29873)

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the...

CVE-2023-31181

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

Path traversal

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

CVE-2023-31181

Affected software: WJJ Software InnoKB Server and InnoKB/Console, version 2.2.1. Issue: Path traversal (CWE-22) that allows accessing files/directories outside the intended root due to improper input handling. Documented impact aligns with high confidentiality impact per CVSS 3.1 but no exploitab...

CVE-2023-31181 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

CVE-2023-31284

creationtimestamp| type| source ---|---|--- 2023-05-05 00:37:15+00:00| seen| https://t.me/cibsecurity/63326 2023-11-22 16:36:07+00:00| seen| https://t.me/arpsyndicate/357...

PT-2023-20957 · Unknown · Myq Solution Print Server +1

Name of the Vulnerable Software and Affected Versions: MyQ Solution Print Server versions prior to 8.2 Patch 32 MyQ Solution Central Server versions prior to 8.2 Patch 22 Description: The issue is related to incorrect access control in the runReport function, allowing users without appropriate...

SUSE SLES15: kernel-livepatch-5_3_18-150200_24_139-default / etc (SUSE-SU-2023:1995-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1995-1 advisory. This update for the Linux Kernel 5.3.18-15020024139 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race...

Nokia NetAct 代码问题漏洞

Nokia NetAct is a network management system from Nokia, Finland. A security vulnerability exists in Nokia NetAct versions prior to 22 FP2211, which stems from a lack of input validation and proper XML parser configuration...