Security Bulletin: Vulnerabilities in Apache HttpComponents affect IBM Storage Protect Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management (CVE-2012-6153, CVE-2014-3577, CVE-2020-13956)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for VMware only, and IBM Storage Protect for Space Management can be affected by a vulnerability in Apache HttpComponents. The vulnerability can lead to spoofing attacks, bypass of...

Security Bulletin: Multiple vulnerabilities in Apache Xerces2 Java XML Parser affect IBM Jazz Reporting Service

Summary There are multiple vulnerabilities in Apache Xerces2 Java XML Parser is used by IBM Jazz Reporting Service. IBM has addressed the relevant CVEs CVE-2012-0881, CVE-2013-4002, CVE-2022-23437 Vulnerability Details CVEID:CVE-2012-0881 DESCRIPTION: Apache Xerces2 Java is vulnerable to a denial...

CVE-2012-3770

creationtimestamp| type| source ---|---|--- 2023-09-14 22:24:52+00:00| seen| Telegram/1O62GwMRX-cXA1HERBIZ4kzrxiH80c8TC3uLWbW0VS60zAU...

CVE-2012-3782

creationtimestamp| type| source ---|---|--- 2023-09-14 22:24:48+00:00| seen| https://t.me/cibsecurity/70466...

CVE-2012-3778

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3780

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3782

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3785

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3775

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3772

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3767

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3764

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3717

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3662

Rejected reason: This candidate is unused by its CNA...

CVE-2012-3763

Rejected reason: This candidate is unused by its CNA...

CVE-2012-0673

Rejected reason: This candidate is unused by its CNA...

GHSA-CGWF-W82Q-5JRR Apache Commons Compress denial of service vulnerability

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

Input validation

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

Security Bulletin: There is a vulnerability in Apache Commons HttpClient used by IBM Maximo Asset Management (CVE-2012-5783)

Summary There is a vulnerability in Apache Commons HttpClient used by IBM Maximo Asset Management. Vulnerability Details CVEID:CVE-2012-5783 DESCRIPTION: Apache Commons HttpClient, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, could allow a remote attacker ...

Oracle Linux 5 : ELSA-2012-1174-1: / kernel (ELSA-2012-11741)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-11741 advisory. - The rioioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows...