Security Bulletin: IBM License Key Server Administration & Reporting Tool and Agent are vulnerable to avulnerability in Apache Commons Compress Library

Summary A Denial of Service vulnerability has been found in Apache Commons Compress. It affects IBM License Key Server Administration & Reporting Tool and its Agent. A mitigation has been released. Vulnerability Details CVEID:CVE-2024-25710 DESCRIPTION: Apache Commons Compress is vulnerable to a...

CVE-2023-48396

creationtimestamp| type| source ---|---|--- 2024-07-30 14:14:44+00:00| seen| https://t.me/cvedetector/2030...

DEBIAN-CVE-2024-42100

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hwtoccucommon on hw without common In order to set the rate range of a hw sunxiccuprobe calls hwtoccucommon assuming all entries in desc-ccuclks are contained in a ccucommon struct. This assumpti...

CVE-2024-42100

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hwtoccucommon on hw without common In order to set the rate range of a hw sunxiccuprobe calls hwtoccucommon assuming all entries in desc-ccuclks are contained in a ccucommon struct. This assumpti...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2024-27309)

Summary Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2024-27309 The below vulnerability have been addressed. Vulnerability Details CVEID:CVE-2024-27309 DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by improper access...

Security Bulletin: Due to use of Apache Pulsar, IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is vulnerable to a security restrictions bypass.

Summary Pulsar is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2024-28098, CVE-2024-29834 The below vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-28098 DESCRIPTION: Apache Pulsar could allow a remote authenticated attacker to bypa...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an invalid pointer dereference in the clk:sunxi-ng module when sunxiccuprobe calls hwtoccucommon,...

Malicious code in personal-profile-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 136e1c2fac917aaba8df4ef32c809261914f9790cc20d8937b61e6eeccecc684 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-7165

creationtimestamp| type| source ---|---|--- 2024-07-28 21:03:28+00:00| seen| https://t.me/cvedetector/1781...

CVE-2024-6548

creationtimestamp| type| source ---|---|--- 2024-07-27 04:54:57+00:00| seen| https://t.me/cvedetector/1741...

Malicious code in szn-search-mlops-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 062d7a1b66afdb645fe65b5cc0fbd6d24390d777892168de0b2f73c5e63f2320 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11702 Malicious code in search-python-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c88a2aa7e382781b4c0032b273e3e772875f1e3cbd8e22569c90d1d3ebf9198 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in search-python-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c88a2aa7e382781b4c0032b273e3e772875f1e3cbd8e22569c90d1d3ebf9198 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Important: Red Hat Security Advisory: Advanced Virtualization 8.2.1z security update

The updated Advanced Virtualization module is now available for Red Hat Enterprise Linux 8.2.1 Advanced Virtualization. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2023-45288 affecting package libcontainers-common for versions less than 20240213-2

CVE-2023-45288 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2022-2879 affecting package libcontainers-common for versions less than 20240213-2

CVE-2022-2879 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2024-1753 affecting package libcontainers-common for versions less than 20240213-2

CVE-2024-1753 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2024-3727 affecting package libcontainers-common for versions less than 20240213-2

CVE-2024-3727 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2024-37298 affecting package libcontainers-common for versions less than 20240213-2

CVE-2024-37298 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...