1499 matches found
EUVD-2022-44020
Malicious code in bioql PyPI...
EUVD-2023-28947
Malicious code in bioql PyPI...
EUVD-2023-46478
Malicious code in bioql PyPI...
EUVD-2022-44021
Malicious code in bioql PyPI...
EUVD-2024-46251
Malicious code in bioql PyPI...
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in the Spring framework (CVE-2025-41234)
Summary A vulnerability in the Spring framework that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-41234 DESCRIPTION: Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflect...
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Wink (CVE-2010-2245)
Summary A vulnerability in Apache Wink that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2010-2245 DESCRIPTION: XML External Entity XXE vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial o...
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in VMware Tanzu Spring Framework
Summary Multiple vulnerabilities in VMware Tanzu Spring Framework that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2024-38816 DESCRIPTION: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerabl...
PT-2025-39911
Name of the Vulnerable Software and Affected Versions IBM InfoSphere versions 11.7.0.0 through 11.7.1.6 Description The software contains a flaw that may allow an authenticated user to execute arbitrary commands with elevated privileges on the system. This is due to improper validation of...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to sensitive information disclosure (CVE-2025-25045)
Summary A sensitive information disclosure vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-25045 DESCRIPTION: IBM InfoSphere Information Server authenticated user to obtain sensitive information when a detailed technical error message is...
Security Bulletin: Apache Commons FileUpload used by IBM InfoSphere Identity Insight has a potential vulnerability (CVE-2025-48976))
Summary Apache Commons FileUpload used by IBM InforSphere Identity Insight provided a hard-coded limit of 10kB for the size of the headers associated with a multipart request. A specially crafted request that used a large number of parts with large headers could trigger excessive memory usage...
CVE-2024-56468
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service...
CVE-2024-56468
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service...
CVE-2024-56468
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service...
CVE-2024-56468 IBM InfoSphere Data Replication VSAM for z/OS Remote Source denial of service
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service...
CVE-2024-56468
CVE-2024-56468 affects IBM InfoSphere Data Replication VSAM for z/OS Remote Source, specifically the Log Reader Service in version 11.4. A remote attacker can cause a denial of service by sending an invalid HTTP request to the log reading service. Remediation: IBM fixes (IDR 11.4) via fixcentral ...
Security Bulletin: IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a denial of service by sending an invalid HTTP request to the log reading service due to CVE-2024-56468.
Summary An invalid HTTP request to the log reading service could lead to a denial of service for IBM InfoSphere Data Replication VSAM for z/OS Remote Source. Vulnerability Details CVEID:CVE-2024-56468 DESCRIPTION: IBM InfoSphere Data Replication VSAM for z/OS Remote Source could allow a remote us...
CVE-2025-36034
IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques...
CVE-2025-0966
IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
IBM InfoSphere 11.7.0.x < 11.7.1.6 DoS (7235496)
The version of IBM InfoSphere Information Server installed on the remote host is 11.7.0 prior to 11.7.1.6. It is, therefore, affected by a denial of service vulnerability, as referenced in the 7235496 advisory. - IBM InfoSphere Information Server could allow a remote attacker to cause a denial of...