Security Bulletin: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.

Summary IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting CVE-2025-36148. Vulnerability Details CVEID:CVE-2025-36148 DESCRIPTION: IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allows an...

Linux Distros Unpatched Vulnerability : CVE-2020-36148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault err...

MAL-2025-36148 Malicious code in test-mlw2-rungs-bushy (npm)

The package test-mlw2-rungs-bushy was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-36148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c. CVE-2022-36148 Note that Nessus relies on the...

Ubuntu: Security Advisory (USN-7660-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2024-36148

creationtimestamp| type| source ---|---|--- 2025-01-09 22:15:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1102...

CVE-2024-36148 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

Advisory ROSA-SA-2023-2256

Software: libmysofa 1.3.1 OS: ROSA-CHROME packageevrstring: libmysofa-1.3.1-1.src.rpm CVE-ID: CVE-2020-36148 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Improper handling of input to theverifyAttribute function in the libmysofa 0.5-1.1 library will result in dereferencing a null pointer and a...

SUSE CVE-2020-36148

Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

DEBIAN-CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2022-36148

CVE-2022-36148 : fdkaac commit 53fe239 contains a floating point exception (FPE) via wav_open in /src/wav_reader.c. Multiple feeds (NVD, OSV, Debian, Ubuntu/Nessus) corroborate the same issue. The vulnerability is tied to that specific commit; no patch/version information is provided in the visib...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2021-36148

An issue was discovered in ACRN before 2.5. dmarfreeirte in hypervisor/arch/x86/vtd.c allows an irteallocbitmap buffer overflow...

CVE-2021-36148

CVE-2021-36148 affects the ACRN hypervisor prior to version 2.5. The vulnerability is in dmar_free_irte (hypervisor/arch/x86/vtd.c) where an irte_alloc_bitmap buffer overflow is possible. CVSS details from the entry indicate a HIGH impact (CVSS 3.1: LOCAL access, UI required, base score 7.8) with...

openSUSE: Security Advisory for libmysofa (openSUSE-SU-2021:0444-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...