CVE-2023-50301

IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user, exposing data via log disclosure. The vulnerability is rooted in log file handling of sensitive information. IBM lists affected version 10.0.1 and provides remedia...

Security Bulletin: due to the use of Apache Commons IO, IBM Transformation Extender Advanced is vulnerable to excessive CPU consumption

Summary Apache Commons IO is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of .... CVE-2024-47554 Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The...

CVE-2023-53474

In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bankmap Thee maximum number of MCA banks is 64 MAXNRBANKS, see a0bc32b3cacf "x86/mce: Increase maximum number of banks to 64". However, the bankmap which contains a bitfield of which banks to initializ...

UBUNTU-CVE-2023-53474

In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bankmap Thee maximum number of MCA banks is 64 MAXNRBANKS, see a0bc32b3cacf "x86/mce: Increase maximum number of banks to 64". However, the bankmap which contains a bitfield of which banks to initializ...

CVE-2023-53474 x86/MCE/AMD: Use an u64 for bank_map

In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bankmap Thee maximum number of MCA banks is 64 MAXNRBANKS, see a0bc32b3cacf "x86/mce: Increase maximum number of banks to 64". However, the bankmap which contains a bitfield of which banks to initializ...

CVE-2022-50427 ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix possible memory leak in sndac97devregister If deviceregister fails in sndac97devregister, it should call putdevice to give up reference, or the name allocated in devsetname is leaked...

IBM Transformation Extender Advanced security vulnerabilities

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. A security vulnerability exists in IBM Transformation Extender Advanced version 10.0.1, which stems from not requiring users to use strong password...

IBM Transformation Extender Advanced log information leakage vulnerability

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. IBM Transformation Extender Advanced suffers from a log information disclosure vulnerability that originates from storing sensitive information in ...

CVE-2023-49883: Weak Password Requirements

IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

CVE-2023-50300: Improper Access Control

IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...

PT-2025-40276

Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description The software does not enforce strong passwords by default, potentially simplifying account compromise by attackers. Recommendations Ensure users are required to use strong passwor...

PT-2025-40277

Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description The software contains improper access controls, potentially allowing a local user to perform unauthorized actions. Recommendations At the moment, there is no information about a...

IBM Transformation Extender Advanced code issue vulnerability

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. A code issue vulnerability exists in IBM Transformation Extender Advanced version 10.0.1 that stems from a failure to disable a session after loggi...

CVE-2023-50301: Insertion of Sensitive Information into Log File

IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user...

CVE-2023-49881: Insufficient Session Expiration

IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

Moderate: Red Hat Security Advisory: RHACS 4.7.7 bug fix and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Moderate: Red Hat Security Advisory: RHACS 4.7 bug fix and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Moderate: Red Hat Security Advisory: RHACS 4.7 bug fix and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

libwebp:[email protected]: Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=5210650793279488 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type:...

ROS-20250929-08

Intel processor firmware vulnerability is linked to information disclosure. Exploitation exploitation of the vulnerability could allow an intruder to gain unauthorized access to protected information A vulnerability in the cross-platform Xen hypervisor of the Linux operating system kernel is...