24755 matches found
Security Bulletin: Security Vulnerabilities in base image packages affect IBM Voice Gateway
Summary Security Vulnerabilities in base image packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-39338 DESCRIPTION: Axios is vulnerable to server-side request forgery, caused by a flaw with requests for path relative URLs get processe...
Security Bulletin: IBM Technical Support Appliance - possible excessive CPU usage or denial of service
Summary DNS protocol allows teh IBM Technical Suport Appliance to resolve hostnames to their corresponding IP address. Vulnerability Details CVEID:CVE-2023-4408 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error when parsing large DNS messages. By flooding the target...
postgresql bug fix and enhancement update
An update is available for postgresql. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...
bubblewrap bug fix and enhancement update
An update is available for bubblewrap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...
RockyLinux 8 : gstreamer1-plugins-base (RLSA-2024:9056)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9056 advisory. gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 Tenable has extracted the preceding description block directly from the RockyLinux security...
Ghostscript Base/gsdevice.c Code Execution
The vulnerability in the base/gsdevice.c component of the software for processing, transforming, and generating Ghostscript documents is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Fedora: Security Advisory (FEDORA-2024-727ecb90c7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-8605 · Nvidia · Nvidia Base Command Manager
Name of the Vulnerable Software and Affected Versions: NVIDIA Base Command Manager affected versions not specified Description: The issue is related to a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial...
com.tencent.bk.base.datahub:flink-cdc-base (2.3.0-bkbase.3), com.tencent.bk.base.datahub:flink-connector-db2-cdc (>=2.3.0-bkbase.1, <=2.3.0-bkbase.3) +50 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.6.4.final)
io.debezium:debezium-core MAVEN version 1.6.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.tencent.bk.base.datahub:flink-cdc-base 2.3.0-bkbase.3 -...
cn.langpy:db-listener (>=0.0.9-jdk8, <=1.0.4-jdk8), cn.tenmg:flink-cdc-log-base (1.0.0) +51 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (1.5.4.final)
io.debezium:debezium-core MAVEN version 1.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - cn.langpy:db-listener =0.0.9-jdk8, =2.2.0, =2.1.0, =2.1.0, =2.1.0, =2.2.1 and more Source cves:...
PT-2024-30630 · Imagination Technologies · Powervr
Name of the Vulnerable Software and Affected Versions: PowerVR affected versions not specified Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, potentially gaining access to the graphics buffers of a parent process. This is...
Malicious code in seller-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5db21562e7497ec5adc28e28b00fc5244edb3d466c9737f959d44af9cdbf5ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10793 Malicious code in seller-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5db21562e7497ec5adc28e28b00fc5244edb3d466c9737f959d44af9cdbf5ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OSV-2024-1311 Security exception in java.base/java.util.Arrays.copyOfRange
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836879 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...
Malicious code in opa-fe-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0912f1fa265b4c148d99d5ebf17f99f098efa46a5222a44acee011d8ab0680df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10764 Malicious code in opa-fe-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0912f1fa265b4c148d99d5ebf17f99f098efa46a5222a44acee011d8ab0680df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: IBM B2B Sterling integrator is affected by Apache Santuario vulnerability to information disclosure
Summary IBM B2B Sterling integrator is vunerable to information disclosure due to Apache Santuario Vulnerability Details CVEID:CVE-2023-44483 DESCRIPTION: Apache Santuario could allow a remote authenticated attacker to obtain sensitive information, caused by the storage of a private key in the lo...
Security Bulletin: IBM B2B Sterling Integrator is vunerable to denial of services attacks due to an Apache Commons vulnerability
Summary IBM B2B Sterling Integrator is vunerable to denial of services attacks due to an Apache Commons vulnerability Vulnerability Details CVEID:CVE-2024-25710 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an infinite loop flaw. By persuading a victim to op...
Security Bulletin: IBM B2B Sterling Integrator is affected by Apache MINA SSHD vulnerability to information disclosure (CVE-2023-35887)
Summary IBM B2B Sterling Integrator is affected by Apache MINA SSHD vulnerability to information disclosure. Vulnerability Details CVEID:CVE-2023-35887 DESCRIPTION: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers...
Malware in agn-base
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...