Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application and IBM HTTP Server which is included as part of IBM Tivoli Monitoring ITM portal server. have been remediated Vulnerability Details CVEID:CVE-2024-45071 DESCRIPTION: IBM WebSphere Application Server is vulnerable to stored cross-site...

MAL-2024-10334 Malicious code in pupeteeerproxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b899c3f245eb5c7079ae838714250cbdc6d7d2c1a29f2daacb50f815a2f2a04e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10335 Malicious code in pupeteer-extra-plugin-adblocker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfffdf6c32cb0c90da6d3c8ba90795b20263639632de94ffa38855818054b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

IBM WebSphere Application Server security vulnerabilities

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WebSphere...

OpenIMAJ security vulnerabilities

OpenIMAJ Open Intelligent Multimedia Analysis for Java is an OpenIMAJ open source collection of multimedia image, text, video, audio, etc. content analysis and content generation libraries and tools. A security vulnerability exists in OpenIMAJ version v1.3.10, which stems from an XML external...

RHEL 7 : python-defusedxml and python-pysaml2 (RHSA-2017:0937)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0937 advisory. The defusedxml package contains several Python-only updates for security vulnerabilities in Python's XML libraries. Defusedxml functions and classes...

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

CVE-2024-45086: Improper Restriction of XML External Entity Reference

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2024-51136

The CVE-2024-51136 entry describes an XML External Entity (XXE) vulnerability in OpenIMAJ’s Dmoz2CSV component for OpenIMAJ v1.3.10. The root cause is improper handling of external entities in XML files, enabling an attacker to read sensitive data or potentially execute arbitrary code by supplyin...

Malicious code in allocations-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2043c21b9a8ddcf7961abb0f633a777981430b94043ebf735afb392ad92c84b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gyaani (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb67552bd91849ea3638c757ce2ae5d51fb7953df212be9ece860b2453b9b314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10303 Malicious code in gyaani (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb67552bd91849ea3638c757ce2ae5d51fb7953df212be9ece860b2453b9b314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10302 Malicious code in freshchange (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef4af44ca82b1bcc59591f04f573a67cdbb3de08f662fe614ab84b9b2bf443e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10260 Malicious code in eslint-config-ezugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d56fee7da920240c31fc321fe3cf58c9364d91f02c237c95103fbb7d7922dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10264 Malicious code in metadata-attacher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6eea908e9ca02abdc2e10b5fd9250bcece1ba385f9605460c33dcf8df855dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through 1.3.980...

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...