484 matches found
Security Bulletin: Multiple vulnerabilities in IBM Controller
Summary Multiple vulnerabilities were addressed in IBM Controller 11.1.2. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could...
Security Bulletin: Vulnerability in IBM DevOps Solution Workbench
Summary The following vulnerability was addressed in IBM DevOps Solution Workbench version 5.1. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent...
TencentOS Server 4: tomcat (TSSA-2025:0440)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0440 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Security Bulletin: IBM webMethods BPM is affected by multiple vulnerabilities
Summary Vulnerabilities due to Apache tomcat have been addressed in IBM webMethods BPM. Vulnerability Details CVEID:CVE-2025-52520 DESCRIPTION: For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits...
Security Bulletin: IBM OpenPages for Cloud Pak for Data is Vulnerable to Multiple Spring Framework Vulnerabilities (CVE-2024-38828,CVE-2024-38820)
Summary Spring MVC controller vulnerable to a DoS attack and DataBinder Case Sensitive Match Exception. These vulnerabilities were remediated. Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS...
Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library
Summary Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions. The vulnerability involves case-sensitive patterns for disallowedFields on a DataBinder, meaning a field is not effectively protected unless it is listed with both upper and lower case for the first...
EUVD-2021-1611
Malware in sbrugna...
EUVD-2005-4752
Malware in sbrugna...
EUVD-2021-10053
Malware in sbrugna...
EUVD-2008-4341
Malware in sbrugna...
EUVD-2008-2540
Malware in sbrugna...
EUVD-2006-4216
Malware in sbrugna...
EUVD-2017-17443
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-608316)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-608316 advisory. Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathIn...
EUVD-2021-3592
Malicious code in bioql PyPI...
EUVD-2025-16411
Malicious code in bioql PyPI...
EUVD-2021-32609
Malicious code in bioql PyPI...
EUVD-2022-4608
Malicious code in bioql PyPI...