CVE-2023-31006 IBM Security Access Manager Container denial of service

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 is vulnerable to a denial of service attacks on the DSC server. IBM X-Force ID: 254776...

CVE-2023-31006

Summary: CVE-2023-31006 affects IBM Security Verify Access (ISVA) Docker and Appliance 10.0.0.0–10.0.6.1, where the DSC server can be overwhelmed, causing a denial of service. The issue is documented across IBM and Red Hat advisories and furthers that affected products include the ISVA Docker ima...

MAL-2024-929 Malicious code in dsc-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e99f436691aa5bed12da2fbf3273db2a6fc1989887f12d5b3602a74b4d2a0ae4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dsc-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e99f436691aa5bed12da2fbf3273db2a6fc1989887f12d5b3602a74b4d2a0ae4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-3390

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a late dereference check of the dsc variable in the link set dsc pps packet function. This function is part of the drm/amd/display module in the Linux kernel. T...

Malicious code in dsc-sb-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 458ac7c5e063d5187da81c884536706b770ade8c1f17c45f6c49c5b600370261 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-44219

A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a local low-privileged user to gain system privileges through running the recovery feature...

Cisco Catalyst SD-WAN Manager Web UI HTML Injection (cisco-sa-vmanage-html-3ZKh8d6x)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD- WAN vManage, could allow an authenticated, remote attacker to inject HTML content. Thi...

Turla Exploits Ukraine’s Defense Sector with DeliveryCheck Backdoor

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary DeliveryCheck, a .NET-based backdoor, targets Ukraines defense sector, attributed to Russian actor Turla; it aims to exfiltrate Signal app data. Notably, it breaches Microsoft Exchange servers using...

flusskreuzfahrten-guenstiger.de Cross Site Scripting vulnerability OBB-3451977

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2012-2241

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted 1 .dsc or 2 .changes file, probably related to a NULL byte in a filename...

SUSE CVE-2015-0840

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file .dsc...

SUSE CVE-2019-14811

A flaw was found in, ghostscript versions prior to 9.50, in the .pdfhookDSCCreator procedure where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protection and then have access to the fi...

PT-2022-11680 · Unknown · Dns-Stats Hedgehog

Name of the Vulnerable Software and Affected Versions: dns-stats hedgehog affected versions not specified Description: A vulnerability was found in dns-stats hedgehog, which has been rated as problematic. The issue affects the function DSCIOManager::dsc import input from source of the file...

Hedgehog SQL注入漏洞

Hedgehog is an open source dns-stats visualization tool for DNS statistics. Hedgehog has a SQL injection vulnerability , the vulnerability stems from a problem in the function DSCIOManager::dscimportinputfromsource in file src/DSCIOManager.cpp, which can lead to sql injection...

CVE-2022-30148

CVE-2022-30148 is a Windows DSC information disclosure vulnerability affecting the Windows Desired State Configuration component. The connected sources confirm the issue is described as a DSC information disclosure vulnerability and indicate remediation is through Microsoft security updates relea...

Windows Desired State Configuration (DSC) Information Disclosure Vulnerability

...

GSD-2022-1002251 drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug

drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1001544 drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug

drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001229 drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug

drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...