21367 matches found
Security Bulletin: IBM Workload Automation potentially affected by a vulnerability in Google Guava (CVE-2023-2976)
Summary IBM Workload Automation is potentially affected by a vulnerability found in Google Guava that can cause sensitive information disclosure. Vulnerability Details CVEID:CVE-2023-2976 DESCRIPTION: Google Guava could allow a local authenticated attacker to obtain sensitive information, caused ...
Security Bulletin: IBM Event Streams is affected by a remote code execution vulnerability (CVE-2023-26136).
Summary A Remote Code Execution RCE vulnerability in Salesforce tough-cookie could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. Vulnerability Detai...
Trusted Compute Base Elevation of Privilege Vulnerability
...
Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)
Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)
Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)
Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)
Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)
Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)
Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)
Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...
Intel® Server OpenBMC Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® OpenBMC firmware may allow escalation of privilege and information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32280 Description: Insufficiently...
Microsoft Windows Trusted Compute Base Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Trusted Compute Base. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...
The vulnerability of microprogramming software for base stations (BS) in wireless communication with Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 allows a intruder to execute arbitrary code.
The vulnerability of microprogramming software for base stations BS in wireless communication systems of Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to execu...
Heap overflow
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...
UBUNTU-CVE-2024-1062
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...
CVE-2024-1062 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...
CVE-2024-1062
CVE-2024-1062 is a heap overflow in 389-ds-base that can cause a denial of service when a value larger than 256 characters is written to the log_entry_attr field. The CVE is evaluated as a local, high-availability risk with a MEDIUM base score from CVSS 3.1 (AV:L, AC:L, PR:L, UI:N, S:U, C:N, I:N,...
CVE-2024-1062 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...
