122 matches found
Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by Improper Encoding of Output in Apache Log4j API (CVE-2026-49844)
Summary A security vulnerability CVE-2026-49844 has been identified in Apache Log4j API, a logging library used by applications, including IBM Engineering Lifecycle Optimization - Engineering Publishing. The vulnerability is caused by improper encoding of non-finite floating-point values NaN,...
Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by a Denial of Service vulnerability in Jackson Core (CVE-2026-18401)
Summary A security vulnerability CVE-2026-18401 has been identified in the Jackson Core library used by IBM Engineering Lifecycle Optimization - Engineering Publishing. The non-blocking async JSON parser fails to enforce the maxNumberLength constraint default: 1,000 characters defined in...
CVE-2023-45190
IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or...
CVE-2024-41763
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2024-41768
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the connection in an unexpected or insecure state...
CVE-2024-39725
IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2024-41767
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
EUVD-2021-25456
Malware in sbrugna...
EUVD-2021-25454
Malware in sbrugna...
EUVD-2024-38208
Malicious code in bioql PyPI...
EUVD-2024-38905
Malicious code in bioql PyPI...
EUVD-2024-38904
Malicious code in bioql PyPI...
EUVD-2024-38903
Malicious code in bioql PyPI...
EUVD-2024-38901
Malicious code in bioql PyPI...
EUVD-2023-49494
Malicious code in bioql PyPI...
EUVD-2023-49498
Malicious code in bioql PyPI...
EUVD-2024-54848
Malicious code in bioql PyPI...
CVE-2024-52890
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.03 could be susceptible to cross-site scripting due to no validation of URIs...
Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing - could be susceptible to cross-site scripting due to no validation of URIs.
Summary IBM Engineering Lifecycle Optimization - Publishing could be susceptible to cross-site scripting due to no validation of URIs. Following IBM® Engineering Lifecycle Management product is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Lifecycle Optimizati...
