8 matches found
openSUSE 16 Security Update : php-composer2 (openSUSE-SU-2026:21778-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21778-1 advisory. This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257. Tenabl...
Security update for php-composer2
This update for php-composer2 fixes the following issue: CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...
OPENSUSE-SU-2026:21778-1 Security update for php-composer2
This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...
php-composer2-2.10.3-2.1 on GA media (moderate)
php-composer2-2.10.3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11689-1 Rating: moderate Cross-References: CVE-2026-84361 CVSS scores: CVE-2026-84361 SUSE : 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...
Linux Distros Unpatched Vulnerability : CVE-2026-84361
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an...
CVE-2026-84361
creationtimestamp| type| source ---|---|--- 2026-09-02 09:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100749 2026-09-02 10:00:05+00:00| published-proof-of-concept| Telegram/Zg7xNPwQElgOazaR8r2v4bs6d55u6MTShsUIaSZkGoRM78 2026-09-02 13:30:04+00:00| seen|...
CVE-2013-3023
IBM TADDM (Tivoli Application Dependency Discovery Manager) versions 7.1.2 and 7.2.0 up to 7.2.1.4 are affected by CVE-2013-3023, which could allow remote attackers to obtain Tomcat credentials by sniffing HTTP sessions. The IBM Security Bulletin confirms the vulnerability in the Tomcat interface...
CVE-2013-3023
IBM Tivoli Application Dependency Discovery Manager TADDM 7.1.2 and 7.2.0 through 7.2.1.4 might allow remote attackers to obtain sensitive information about Tomcat credentials by sniffing the network for a session in which HTTP is used. IBM X-Force ID: 84361...