CVE-2024-28795

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286832...

PT-2024-24279 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 LTS and 9.3 CD Description: The issue allows an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment. Recommendations: For IBM MQ versions 9.3 LTS and 9.3 CD, a...

IBM MQ 安全漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. A denial of service vulnerability exists in IBM MQ, which can be exploited by an...

IBM Security Verify Access 安全漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

War Crime Prosecutions Enter a New Digital Age

A custom platform developed by SITU Research aided the International Criminal Court’s prosecution in a war crimes trial for the first time. It could change how justice is enacted on an international scale...

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in resource management errors, which allow attackers to cause service failures.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted queries...

IBM Security SOAR Code Injection Vulnerability

IBM Security SOAR is a product from International Business Machines IBM, formerly known as Resilient, designed to help your security team confidently respond to cyber threats, automate through intelligence, and collaborate through consistency. A code injection vulnerability exists in IBM Security...

CVE-2024-38427

In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false...

CVE-2024-38427

In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false...

CVE-2024-38427

In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false...

International Color Consortium DemoIccMAX Security Breach

DemoIccMAX is an International Color Consortium open source demo implementation of the iccMAX color profile. A security vulnerability exists in versions prior to International Color Consortium DemoIccMAX 85ce74e, which stems from a compilation error in IccUtil.cpp that results in an unconditional...

PT-2024-27997 · International Color Consortium · Demoiccmax

Name of the Vulnerable Software and Affected Versions: International Color Consortium DemoIccMAX versions prior to 85ce74e Description: A logic flaw exists in the CIccTagXmlProfileSequenceId::ParseXml function within IccTagXml.cpp, causing it to unconditionally return false. This issue is related...

CVE-2024-38427

In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in IccXML/IccLibXML/IccTagXml.cpp results in unconditionally returning false...

CVE-2024-38427

CVE-2024-38427 affects International Color Consortium DemoIccMAX prior to 85ce74e. A logic flaw in CIccTagXmlProfileSequenceId::ParseXml (IccXML/IccLibXML/IccTagXml.cpp) causes unconditionally returning false, with potential total impact per CVSS 3.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Remedia...

IBM DB2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service full vulnerability that can be exploited by an attacker to cau...

IBM Engineering Requirements Management DOORS Next Code Issue Vulnerability

IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A code issue vulnerability exists in IBM Engineering Requirements...

ATEN International PE6208 安全漏洞

The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in ATEN International PE6208 version 2.3.228, version 2.4.232. An attacker can exploit the vulnerability to log in to the web interface and ga...

Chinese Nationals Arrested for Laundering $73 Million in Pig Butchering Crypto Scam

The U.S. Department of Justice DoJ has charged two arrested Chinese nationals for allegedly orchestrating a pig butchering scam that laundered at least $73 million from victims through shell companies. The individuals, Daren Li, 41, and Yicheng Zhang, 38, were arrested in Atlanta and Los Angeles ...

CVE-2024-27790

Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker Server. This issue has been fixed in FileMaker Server 20.3.2 by validating transactions before replying to client requests...

CVE-2024-27790

Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker Server. This issue has been fixed in FileMaker Server 20.3.2 by validating transactions before replying to client requests...