CVE-2024-11346

: Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from ..P001 through ..P233, from ..P001 through...

CVE-2024-11347 Access of Resource Using Incompatible Type in Postscript interpreter

Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...

CVE-2024-11346 Access of Resource Using Incompatible Type in Postscript interpreter

: Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from ..P001 through ..P233, from ..P001 through...

The vulnerability of the IBM Control Center’s process monitoring and control system, related to inconsistencies in responses to incoming requests, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Control Center’s process monitoring and control system lies in the inconsistency of responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

IBM ApplinX 安全漏洞

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. A security vulnerability exists in IBM ApplinX. An attacker could exploit the vulnerability to obtain sensitive information when the browser returns a...

IBM ApplinX 安全漏洞

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. A security vulnerability exists in IBM ApplinX. An attacker exploiting the vulnerability could hijack a victim's click-to-operate...

The vulnerability of the IBM Control Center’s process monitoring and control system, related to deficiencies in the error reporting mechanism, allows a perpetrator to access confidential information.

The vulnerability of the IBM Control Center’s process monitoring and control system is related to deficiencies in the reporting mechanism for error reports. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

IBM EntireX 安全漏洞

IBM EntireX is a versatile middleware solution from International Business Machines IBM designed to facilitate seamless integration between core enterprise applications and modern applications. A security vulnerability exists in IBM EntireX that stems from the fact that IBM EntireX may allow loca...

IBM Security Verify Directory 操作系统命令注入漏洞

IBM Security Verify Directory is part of an authentication and access management solution from International Business Machines IBM. An operating system command injection vulnerability exists in IBM Security Verify Directory versions 10.0.0 through 10.0.3. An attacker exploiting this vulnerability...

CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA—in partnership with international and U.S. organizations—released guidance to help organizations protect their network edge devices and appliances, such as firewalls, routers, virtual private networks VPN gateways, Internet of Things IoT devices, internet-facing servers, and internet-facing...

Cybercrime gets a few punches on the nose

It’s not often that we get to share good news, so we wanted to grab this opportunity and showcase some progress made by law enforcement actions against cybercrime with you. Europol notified us about the take-down of two of the largest cybercrime forums in the world. With over 10 million users,...

IBM Sterling B2B Integrator 跨站请求伪造漏洞

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. IBM Sterling B2B Integrator suffe...

Authorities Seize Domains of Popular Hacking Forums in Major Cybercrime Crackdown

An international law enforcement operation has dismantled the domains associated with various online platforms linked to cybercrime such as Cracked, Nulled, Sellix, and StarkRDP. The effort, which took place between January 28 and 30, 2025, targeted the following domains - www.cracked.io...

Bluetooth: ISO: Fix multiple init when debugfs is disabled

...

IBM Security Verify Governance 安全漏洞

IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. IBM Security Verify Governance suffers from a security vulnerability that ste...

The vulnerability of the IBM Robotic Process Automation software lies in its improper security checks at the client side, which allows attackers to exploit their privileges.

The vulnerability of the IBM Robotic Process Automation software lies in improper security checks at the client side. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

IBM Sterling File Gateway 安全漏洞

IBM Sterling File Gateway is a file transfer software package from International Business Machines IBM. The software consolidates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A security vulnerability exists in IBM Sterling...

Cyber Threat Landscape Q&A with Trellix Head of Threat Intelligence John Fokker

Cyber Threat Landscape Q&A with Trellix Head of Threat Intelligence John Fokker By Trellix · January 27, 2025 As we step into 2025, it's time to reflect on the seismic changes that shaped the cybersecurity landscape in 2024 and anticipate what's on the horizon for 2025. The past year saw...

CVE-2023-50946

IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism...

IBM Control Center 安全漏洞

IBM Control Center is a centralized monitoring and management system from International Business Machines IBM. A security vulnerability exists in IBM Control Center versions 6.2.1 and 6.3.1. An attacker exploiting this vulnerability could gain access to sensitive information that is publicly...