Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2023-27554)

Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity XXE Injection vulnerability CVE-2023-27554 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2023-27554)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

MAL-2023-955 Malicious code in wagyu-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef98b86deb0d82a3874d3caaafddc65b5389ca664ff9bc949a3c3c8ee43a8b83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-2941 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consu...

Vulnerability fixed in IBM Websphere

IBM has fixed a vulnerability in Websphere Application Server. A malicious party could exploit the vulnerability to launch an XML External Entity attack. By serving a rogue XML file, the malicious party can cause a denial-of-service cause, or potentially gain access to sensitive information. IBM...

CVE-2023-27554: Improper Restriction of XML External Entity Reference

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249185...

IBM WebSphere Application Server 代码问题漏洞

IBM WebSphere Application Server is an application server product. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An entity injection vulnerability exists in IBM WebSphere Application Server. The vulnerability is du...

Malicious code in the-subtle-art-of-not-giving-a-fck-a-counterintuitive-approach-to-living-a-good-life-by-mark-manson- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcaa8d831b356a3827788e3863430bd598f0af94ac5867e89fdb784f7d8562cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in most-of-all-you-a-love-story-by-mia-sheridan-on-audible-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69c4a6b517453939c6726b561eb2db29c64d194a0363b67ffc3cba22564b4fb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jumping-jude-made-marian-3-by-lucy-lennox-on-audiobook-full-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd52c0bd4e2b63be3c81d5153e45ee41cb11916d25a1bce529214a8d10b923a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-122 Malicious code in beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7faa105f44cbe37ad6640900de81ba2fd9b8d8a89555a095bee8fc30a934e3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-280 Malicious code in dow-load-the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe34371c86eb25d33028fc43131c1b1b281f7e57986816c88163b17125302b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-655 Malicious code in one-of-us-is-lying-one-of-us-is-lying-1-by-karen-m-mcmanus-online-full-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29363c3ead0fb16e0f9653c9e4d460a997774e8c71faa1e9d235c232c4026017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-123 Malicious code in becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-while-supplying-yoursel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2208fd1d29f35f1fe83fe7c0a7a30f398ce914f799fed6a37b0e1eef3bf74dd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-206 Malicious code in conversations-with-friends-by-sally-rooney-on-audible-new-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43a3c0ad8210a979fccfd7f614cae9493219922b5e13d2a02d9a84a2beda365d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-138 Malicious code in born-of-water-elemental-origins-1-by-al-knorr-online-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13ed688a98ceec7189e73832c965d435ff1c7495d8acb4df863273d491b6a74a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-608 Malicious code in most-of-all-you-a-love-story-by-mia-sheridan-on-audible-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69c4a6b517453939c6726b561eb2db29c64d194a0363b67ffc3cba22564b4fb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-865 Malicious code in the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69c217d4c0500cd572578b3d4c2668c30df765a44d665c8eaef5b3906c09ce73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-880 Malicious code in theft-by-finding-diaries-1977-2002-by-david-sedaris-on-kindle-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f908f4ccc0a28c94802da4ab1792616bfdeb1f1c3f5faf766ee5390fd3f3d189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-915 Malicious code in twisted-palace-the-royals-3-by-erin-watt-on-kindle-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82e5fc4c359f2713fb235837bae6b02b169f330d6b03af1b3cc88097ec5764db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...