863 matches found
Security Bulletin: Multiple vulnerabilities in IBM Aspera Orchestrator
Summary Multiple vulnerabilities were addressed in IBM Aspera Orchestrator 4.1.1 Vulnerability Details CVEID:CVE-2025-13211 DESCRIPTION: IBM Aspera Orchestrator could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...
IBM Aspera Orchestrator 操作系统命令注入漏洞
IBM Aspera Orchestrator is a Web-based application from International Business Machines IBM, Inc. It can provide an efficient file processing pipeline for data-driven organizations. An operating system command injection vulnerability exists in IBM Aspera Orchestrator versions 4.0.0 through 4.1.0,...
IBM Aspera Orchestrator SQL注入漏洞
IBM Aspera Orchestrator is a Web-based application from International Business Machines IBM, Inc. It can provide an efficient file processing pipeline for data-driven organizations. A SQL injection vulnerability exists in IBM Aspera Orchestrator versions 4.0.0 through 4.1.0 that stems from improp...
PT-2025-50695
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...
PT-2025-50719
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to improper enforcement of the SIGHASH value in the signature verification process. An attacker can submit non-compliant signatures that are incorrectly accepted as valid by providing...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unknown fields that aren't checked. An attacker can disrupt consensus and cause all block proposals to be rejected by submitting specially crafted vote extensions with...
js-yaml has prototype pollution in merge (<<)
Impact In js-yaml 4.1.0, 4.0.0, and 3.14.1 and below, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. Patches Problem is patched in js-yaml 4.1.1 and 3.14.2...
WordPress 0 Day Analytics plugin <= 4.0.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by kwakbumjun in WordPress Plugin 0 Day Analytics versions = 4.0.0...
CVE-2025-63679
free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF process crashes...
CVE-2025-24842
Uncontrolled search path for the IntelR System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may...
Exploit for Server-Side Request Forgery in Apache Kafka
Apache Kafka 4.1.0 with Keycloak OAuth2 Authentication Produc...
EUVD-2014-8921
Malware in sbrugna...
EUVD-2020-7119
Malware in sbrugna...
EUVD-2018-9932
Malware in sbrugna...
EUVD-2018-6367
Malware in sbrugna...
EUVD-2014-5579
Malware in sbrugna...
EUVD-2018-1775
Malware in sbrugna...