60 matches found
Security Bulletin: Vulnerability in IBM JDK (CVE-2022-40609 ) affects Power HMC
Summary IBM SDK, Java Technology is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the...
WordPress Contact form 7 Custom validation Plugin <= 1.1.3 is vulnerable to SQL Injection
Software Contact form 7 Custom validation Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-40609 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID b7c9ad699602 Credits minhtuanact Required privilege...
Security Bulletin: Vulnerability in IBM Java SDK and IBM Java Runtime affect Rational Functional Tester
Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Functional Tester. Rational Functional Tester has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java...
Security Bulletin: IBM ELM affected as Java deserialization filters (JEP 290) ignored during IBM ORB deserialization (CVE-2022-40609)
Summary IBM ELM affected as IBM ORB does not honour JEP 290 deserialization filters when deserializing serialised object data. This exposes the Java process to a variety of attacks ranging from denial of service to remote code execution via "gadgets" in third party components. The fix ensures tha...
Security Bulletin: IBM PowerVM Novalink is vulnerable because flaw was found in IBM SDK, Java Technology Edition, which could allow a remote attacker to execute arbitrary code on the system caused by an unsafe deserialization flaw. (CVE-2022-40609)
Summary Security Bulletin: IBM PowerVM Novalink is vulnerable because a flaw was found in IBM SDK, Java Technology Edition, which could allow a remote attacker to execute arbitrary code on the system caused by an unsafe deserialization flaw. An attacker could exploit this vulnerability by sending...
Security Bulletin: Multiple vulnerabilities may affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.
Summary IBM® Runtime Environment Java™ is used by CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition. The fix updates the Java Runtime Environment to resolve the following vulnerabilities. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java...
Security Bulletin: Vulnerability in IBM® Java SDK affects IBM Liberty for Java for IBM Cloud due to CVE-2022-40609
Summary There is a vulnerability in the IBM® SDK, Java™ Technology Edition that is shipped with IBM Liberty for Java for IBM Cloud. The CVEs listed in this document might affect some configurations of IBM Liberty for Java for IBM Cloud. This product has addressed the applicable CVE. If you run yo...
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attack due to IBM SDK Java (CVE-2022-40609)
Summary IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attack due to IBM SDK Java CVE-2022-40609. The fix includes IBM SDK Java 8.0.8.5. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remot...
Security Bulletin: A remote code execution vulnerability in IBM Java SDK affects IBM InfoSphere Information Server (CVE-2022-40609)
Summary A remote code execution vulnerability in the IBM® SDK Java™ Technology Edition, Version 8 that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote...
Security Bulletin: Vulnerability in IBM® Java SDK affects IBM WebSphere Application Server due to CVE-2022-40609
Summary There is a vulnerability in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditional . This product has addressed the applicable CVE. If y...
CVE-2022-40609
creationtimestamp| type| source ---|---|--- 2023-08-02 20:48:00+00:00| seen| https://t.me/cibsecurity/67592...
CVE-2022-40609
CVE-2022-40609 describes an unsafe deserialization flaw in IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 , enabling a remote attacker to execute arbitrary code through specially crafted data. The IBM bulletin cites an IBM X-Force base likely high severity (base score 8.1, CVSS 3.x) and no...
Security Bulletin: CVE-2022-40609 affects IBM® SDK, Java™ Technology Edition
Summary CVE-2022-40609 affects the Object Request Broker ORB in IBM SDK, Java Technology Edition. An update has been released to address the vulnerability. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition could allow a remote attacker to execute arbitrary...
IBM Java 7.1 < 7.1.5.19 / 8.0 < 8.0.8.5
The version of IBM Java installed on the remote host is prior to 7.1 7.1.5.19 / 8.0 8.0.8.5. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update August 2023 advisory. - IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execut...
CVE-2021-40609
creationtimestamp| type| source ---|---|--- 2022-06-28 16:36:06+00:00| seen| https://t.me/cibsecurity/45288...
CVE-2021-40609
The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40609
GPAC 1.0.1 is affected by CVE-2021-40609 due to GetHintFormat vulnerability that allows DoS via a crafted MP4Box file. Debian/DSA-5411 fixes upgrade to 1.0.1+dfsg1-4+deb11u2; other advisories recommend upgrading to newer GPAC versions. No exploitation details in provided documents.
