@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)

@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)

@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...

@z1/lib-api-box-client (>=0.2.1, <=0.3.0), @z1/lib-api-box-client-core (>=0.2.0, <=0.3.0) +9 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (4.2.1)

@feathersjs/transport-commons NPM version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @z1/lib-api-box-client =0.2.1, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.52, =0.2.52...

@feathersjs/client (>=3.3.1, <=3.3.2), @feathersjs/primus (3.1.0) +14 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (>=3.2.0, <=4.2.1)

@feathersjs/transport-commons NPM version =3.2.0, =3.3.1, =0.2.1, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.52, =0.2.52, =0.3.0 and more Source cves: CVE-2023-37899 Source advisory: MEND:CVE-2023-37899...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)

@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...

Security Bulletin: IBM Jazz for Service Management is vulnerable to commons-fileupload-1.4.jar (Publicly disclosed vulnerability found by Mend) (CVE-2023-24998)

Summary IBM Jazz for Service Management is vulnerable to commons-fileupload-1.4.jar Publicly disclosed vulnerability found by Mend. The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipar file upload functionality to servlets and web application...

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to a denial of service due to Apache Commons FileUpload (CVE-2023-24998)

Summary IBM WebSphere Application Server traditional is vulnerable to a remote code execution vulnerability. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Ja...

Exploit for CVE-2022-33980

riskootext4shell text4shell script for text coomons =1.10...

Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to sensitive info exposure due to Apache Commons Net (CVE-2021-37533)

Summary IBM Sterling Connect:Direct Web Services uses Apache Commons Net which has a sensitive information exposure via remote attacker vulnerability. Issue has been addressed. Vulnerability Details CVEID:CVE-2021-37533 DESCRIPTION: Apache Commons Net could allow a remote attacker to obtain...

Security Bulletin: Vulberability in Apache commons io library affects IBM Engineering Test Management (ETM) (CVE-2021-29425)

Summary This Security Vulnerablity has been addressed in IBM Engineering Test Management. A fix is available to address the vulnerability. Vulnerability Details CVEID:CVE-2021-29425 DESCRIPTION: Apache Commons IO could allow a remote attacker to traverse directories on the system, caused by...

Security Bulletin: Vulnerabilities in Commons Codec library affects IBM Engineering Test Management (ETM) (IBM X-Force ID:177835)

Summary This Security Vulnerablity has been addressed in IBM Engineering Test Management. A fix is available to address the vulnerability. Vulnerability Details IBM X-Force ID: 177835 DESCRIPTION: Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the...

Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities (CVE-2022-41946, CVE-2022-46364, CVE-2023-24998)

Summary Multiple security vulnerabilities in the components used by IBM Security Verify Governance have been addressed. Vulnerability Details CVEID:CVE-2022-41946 DESCRIPTION: Postgresql JDBC could allow a local authenticated attacker to obtain sensitive information, caused by not limit access to...

Security Bulletin: Multiple vulnerabilities of Apache common collections (commons-collections-3.2.jar) have affected APM WebSphere Application Server Agent

Summary APM WebSphere Application Server Agent is vulnerable to Apache common collections commons-collections-3.2.jar. The fix includes commons-collections-3.2.jar upgraded to commons-collections-3.2.2.jar. CVE-2015-4852, CVE-2017-15708 and CVE-2019-13116 Vulnerability Details CVEID:CVE-2015-4852...

Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in Apache Commons FileUpload and Tomcat (CVE-2023-24998)

Summary A denial of service vulnerability in Apache Commons FileUpload and Tomcat affects WebSphere Liberty that is used by IBM InfoSphere Information Server. The vulnerability was addressed. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerab...

Security Bulletin: InfoSphere Identity Insight is vulnerable to a denial of service due to Apache Commons FileUpload (CVE-2023-24998)

Summary InfoSphere Identity Insight includes IBM WebSphere Application Server Liberty, which has a vulnerability in the Apache Commons FileUpload when servlet-3.0 feature is enabled. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Security Bulletin: There is a vulnerability in Apache Commons Net used by IBM Maximo Asset Management (CVE-2021-37533)

Summary There is a vulnerability in Apache Commons Net used by IBM Maximo Asset Management. Vulnerability Details CVEID:CVE-2021-37533 DESCRIPTION: Apache Commons Net could allow a remote attacker to obtain sensitive information, caused by an issue with the FTP client trusts the host from PASV...

Security Bulletin: WebSphere denial-of-service vulnerability affects IBM Sterling Control Center (CVE-2023-24998)

Summary Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request parts to be processed in the file upload function. By sending a specially-crafted request with series of uploads, a remote attacker could exploit this vulnerability to cau...

Security Bulletin: Vulnerabilities have been identified in OpenSSL, Apache HTTP Server and other system libraries shipped with the DS8000 Hardware Management Console (HMC)

Summary IBM DS8900 Management Console is affected by Open Source expat CVE-2022-43680, libxml2 CVE-2022-40303, CVE-2022-40304, dbus CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, httpd CVE-2023-25690, systemd CVE-2022-4415, OpenSSL CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286,...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.6.2.7)

The version of AOS installed on the remote host is prior to 6.6.2.7. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.6.2.7 advisory. - A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did n...

Security Bulletin: A vulnerability in Apache Commons Code affects IBM Robotic Process Automation and may result in a disclosure of sensitive information. (IBM X-Force ID: 177834)

Summary Apache Commons Codec is used by IBM Robotic Process Automation as part of the IBM Licence and Metrics Tool. IBM X-Force ID: 177834 Vulnerability Details IBM X-Force ID: 177835 DESCRIPTION: Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the...