CVE-2024-57665

creationtimestamp| type| source ---|---|--- 2025-01-29 22:29:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113914006663904743 2025-01-29 23:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgw3ypsaat2f 2025-01-30 01:12:08+00:00|...

CGA-5V28-8J3R-RC7X

Bulletin has no description...

CERTFR-2018-ALE-008

creationtimestamp| type| source ---|---|--- 2025-01-29 16:25:54+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvf3qufrc24...

CVE-2025-24374

Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the left side of the operator. This vulnerability is fixed in 3.19.0...

GHSA-98V2-F47X-89XW

creationtimestamp| type| source ---|---|--- 2025-01-29 11:57:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113911519035869184...

CVE-2024-54461

creationtimestamp| type| source ---|---|--- 2025-01-29 11:57:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113911519018810757 2025-01-29 12:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgux4xjmjn2h 2025-01-29 15:14:40+00:00| seen|...

CVE-2023-35017

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques...

SUSE: Security Advisory (SUSE-SU-2025:0267-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenPanel 0.3.4 Command Injection

OpenPanel version 0.3.4 suffers from a remote command injection vulnerability via the timezone parameter. Exploit Title: OpenPanel 0.3.4 - OS Command Injection via The Timezone Parameter Date: Nov 25, 2024 Exploit Author: Korn Chaisuwan, Punthat Siriwan, Pongtorn Angsuchotmetee Vendor Homepage:...

Ubuntu: Security Advisory (USN-7236-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to requests-2.31.0-py3-none-any.whl CVE-2024-35195

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to requests-2.31.0-py3-none-any.whl CVE-2024-35195. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-35195 DESCRIPTION: Psf Requests could allow a local...

Security Bulletin: IBM MQ affected by denial of service vulnerability (CVE-2024-51470)

Summary IBM MQ has addressed a denial of service vulnerability Vulnerability Details CVEID:CVE-2024-51470 DESCRIPTION: IBM MQ could allow an authenticated user to cause a denial-of-service due to messages with improperly set values. CWE:CWE-754: Improper Check for Unusual or Exceptional Condition...

Security Bulletin: Vulnerability in less (CVE-2024-32487) affects Power HMC.

Summary The less library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-32487 DESCRIPTION: less could allow a remote attacker to execute arbitrary commands on the system. By using a newline character in the name of a...

Security Bulletin: IBM MQ Appliance is vulnerable to exposure of sensitive information (CVE-2024-52897)

Summary IBM MQ Appliance has addressed an exposure of sensitive information vulnerability. Vulnerability Details CVEID:CVE-2024-52897 DESCRIPTION: IBM MQ web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. CWE:CWE-209:...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to express-4.19.2.tgz CVE-2024-43796

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to express-4.19.2.tgz CVE-2024-43796. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-43796 DESCRIPTION: expressjs express is vulnerable to cross-site scripting,...

Security Bulletin: IBM Maximo Application Suite uses WebSphere Application Server Liberty is vulnerable to a denial of service due to Google Protocol Buffers which is vulnerable to CVE-2024-7254

Summary IBM Maximo Application Suite uses WebSphere Application Server Liberty is vulnerable to a denial of service due to Google Protocol Buffers which is vulnerable to CVE-2024-7254. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

Security Bulletin: IBM Maximo Application Suite uses serve-static-1.15.0.tgz, send-0.18.0.tgz and cryptography-43.0.0-cp39-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2024-43800 CVE-2024-43799 CVE-2024-6119.

Summary IBM Maximo Application Suite uses serve-static-1.15.0.tgz, send-0.18.0.tgz and cryptography-43.0.0-cp39-abi3-manylinux228x8664.whl which is vulnerable to CVE-2024-43800, CVE-2024-43799 and CVE-2024-6119. This bulletin contains information regarding the vulnerability and its fixture...

Security Bulletin: IBM App Connect Enterprise is vulnerable to non-integer values mishandles due to nanoid (CVE-2024-55565)

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise Runtime are vulnerable to non-integer value mishandles due to nanoid. Vulnerability Details CVEID:CVE-2024-55565 DESCRIPTION: nanoid aka Nano I...

CVE-2018-9378

creationtimestamp| type| source ---|---|--- 2025-01-28 16:55:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113907029187249528 2025-01-28 16:59:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113907045228780566 2025-01-28 17:15:32+00:00| seen|...

CVE-2024-11954

creationtimestamp| type| source ---|---|--- 2025-01-28 13:25:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113906203889577977 2025-01-28 14:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsnexfyc32t 2025-01-28 17:04:28+00:00| seen|...