Security Bulletin: IBM Events Operator is affected by a denial of service in OpenSSL (CVE-2022-4450).

Summary OpenSSL is used by IBM Events Operator as part of the Operating System CVE-2022-4450. Vulnerability Details CVEID:CVE-2022-4450 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error related to the improper handling of specific PEM data by the PEMreadbioe...

Security Bulletin: IBM Events Operator is vulnerable to a denial of service in OpenSSL (CVE-2023-0286)

Summary OpenSSL used by IBM Events Operator as part of the Operating System CVE-2023-0286. Vulnerability Details CVEID:CVE-2023-0286 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a type confusion error related to X.400 address processing inside an X.509 GeneralName. By...

Security Bulletin: IBM Events Operator is affected by a denial of service in OpenSSL (CVE-2023-0215).

Summary OpenSSL is used by IBM Events Operator as part of its Operating System CVE-2023-0215. Vulnerability Details CVEID:CVE-2023-0215 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a use-after-free error related to the incorrect handling of streaming ASN.1 data by the...

CVAD II Unable to connect to Database from DDC and getting an error "reenter controller address"

Re-enter controller address on DDC error on sql : SSPI Handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed You will be able to find the authentication failures/logon...

CVE-2023-31419

creationtimestamp| type| source ---|---|--- 2023-09-20 22:42:59+00:00| seen| https://t.me/proxybar/1732 2023-09-24 15:22:35+00:00| published-proof-of-concept| https://t.me/CNArsenal/1178 2023-09-24 18:54:10+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9082 2023-09-27...

CVE-2023-43496

creationtimestamp| type| source ---|---|--- 2023-09-20 20:30:16+00:00| seen| https://t.me/cibsecurity/70805 2024-01-03 23:29:41+00:00| seen| https://t.me/arpsyndicate/2382 2024-02-07 15:16:59+00:00| seen| https://t.me/ctinow/180734 2024-02-07 15:17:01+00:00| seen| https://t.me/ctinow/180735...

CVE-2023-40931

creationtimestamp| type| source ---|---|--- 2023-09-20 14:52:49+00:00| seen| https://t.me/thehackernews/3900 2023-09-20 15:35:03+00:00| seen| https://t.me/KomunitiSiber/821 2023-09-20 18:51:27+00:00| seen| Telegram/I2-Kgx70wAMQGYcbQb5fumO7FtMO6W-sQ71gZJS9FIZ7g 2023-09-21 14:50:05+00:00| seen|...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6385-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6385-1 advisory. It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread....

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to the disclosure of protected information, allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2023-29499

creationtimestamp| type| source ---|---|--- 2023-09-15 00:24:49+00:00| seen| https://t.me/cibsecurity/70562 2023-09-15 00:25:08+00:00| seen| https://t.me/cibsecurity/70575...

CVE-2023-42503

creationtimestamp| type| source ---|---|--- 2023-09-14 12:24:22+00:00| seen| https://t.me/cibsecurity/70433 2024-02-06 21:16:49+00:00| seen| https://t.me/ctinow/180317 2024-02-07 13:42:01+00:00| seen| https://t.me/ctinow/180697 2024-02-07 13:42:02+00:00| seen| https://t.me/ctinow/180698 2024-02-0...

CVE-2023-4568

creationtimestamp| type| source ---|---|--- 2023-09-14 00:23:54+00:00| seen| https://t.me/cibsecurity/70422 2023-09-24 18:54:59+00:00| published-proof-of-concept| https://t.me/codeb0ss/1189 2023-09-28 05:04:24+00:00| seen| Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ 2023-09-28...

CVE-2023-4828 ITM Server Communications Hijack

An improper check for an exceptional condition in the Insider Threat Management ITM Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure...

CVE-2023-4828 ITM Server Communications Hijack

An improper check for an exceptional condition in the Insider Threat Management ITM Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure...

Events Manager Plugin for WordPress < 5.9.5 Stored Cross-Site Scripting

The WordPress Events Manager Plugin installed on the remote host is affected by a Cross-Site Scripting XSS vulnerability via the dbemeventreapprovedemailbody parameter. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...

Events Manager Plugin for WordPress < 5.9.6 Stored Cross-Site Scripting

The WordPress Events Manager Plugin installed on the remote host is affected by a stored Cross-Site Scripting XSS due to improper encoding and insertion of data provided to the attribute mapstyle of shortcodes. Note that the scanner has not tested for these issues but has instead relied only on t...

CVE-2023-41615

creationtimestamp| type| source ---|---|--- 2023-09-08 07:19:29+00:00| seen| https://t.me/cibsecurity/70134 2023-12-28 19:16:29+00:00| seen| https://t.me/ctinow/160157...

Oracle Linux 7 : libreoffice (ELSA-2020-1151)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1151 advisory. - Resolves: rhbz1743962 CVE-2019-9848 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2023-4480

creationtimestamp| type| source ---|---|--- 2023-09-05 18:17:05+00:00| seen| https://t.me/cibsecurity/69855 2023-09-05 21:06:26+00:00| seen| https://t.me/ctinow/134883...

CVE-2023-3124

creationtimestamp| type| source ---|---|--- 2023-09-05 12:41:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5088 2024-09-26 11:20:28+00:00| seen| Telegram/sruvLt1HCpQH2DeXdTaAiepbEJlcTFR85rQ5a4S9CfzBwnM 2024-09-26 11:20:28+00:00| seen|...