Security Bulletin: IBM WebSphere Application Server is vulnerable to an information disclosure (CVE-2023-50315)

Summary IBM WebSphere Application Server is vulnerable to an information disclosure. Vulnerability Details CVEID:CVE-2023-50315 DESCRIPTION: IBM WebSphere Application Server could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerabilit...

Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to information disclosure (CVE-2023-50314)

Summary IBM WebSphere Application Server Liberty is vulnerable to information disclosure. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this...

CVE-2024-23499

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-38655

Improper buffer restrictions in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable denial of service via network access...

CVE-2024-23499

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-24983

Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-38655

Improper buffer restrictions in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-38655

Improper buffer restrictions in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-38655

CVE-2023-38655 concerns improper buffer restrictions in firmware for Intel® AMT and Intel® Standard Manageability. The vulnerability could allow a privileged attacker to cause a denial of service over the network. Connected sources corroborate the issue within Intel chipset firmware/CSME/AMT ecos...

K10438187: BIG-IP iControl REST vulnerability CVE-2024-41723

Security Advisory Description Undisclosed requests to BIG-IP iControl REST can lead to an information leak of user account names. CVE-2024-41723 Impact This vulnerability allows for a remote authenticated attacker with network access to the iControl REST interface, through the BIG-IP management...

PT-2024-29943 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: The issue allows a privileged user to conduct an information disclosure via network access. This affects some Zoom Workplace Apps,...

PT-2024-19900 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 28.3 Description: The issue is related to a protection mechanism failure in the Linux kernel mode driver, which may allow an...

IBM WebSphere Application Server Liberty 安全漏洞

IBM WebSphere Application Server Liberty is a Java application server from International Business Machines IBM built on top of the Open Liberty project. A security vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 24.0.0.8, which originates from a...

CVE-2024-42368

The CVE-2024-42368 issue affects the bearertokenauth server authenticator in OpenTelemetry Collector contributions. A timing-discrepancy arises from non-constant time string comparisons of bearer tokens, enabling a network-adjacent attacker to infer the configured token by measuring response time...

PT-2024-28683 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: The issue allows an authenticated user to conduct an information disclosure via network access. This is due to sensitive information...

IBM Java 7.1 < 7.1.5.23 / 8.0 < 8.0.8.30 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 7.1 7.1.5.23 / 8.0 8.0.8.30. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle July 16 2024 CPU advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise...

PT-2024-28684 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: The issue allows a privileged user to conduct an information disclosure via network access. This is a sensitive information disclosur...

Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access

A high-severity security bypass vulnerability has been disclosed in Rockwell Automation ControlLogix 1756 devices that could be exploited to execute common industrial protocol CIP programming and configuration commands. The flaw, which is assigned the CVE identifier CVE-2024-6242, carries a CVSS...

Zexeron ZWX-2000CSW2-HN 安全漏洞

The Zexeron ZWX-2000CSW2-HN is a high-speed coaxial modem from Zexeron Corporation of Japan. A security vulnerability exists in the Zexeron ZWX-2000CSW2-HN prior to version 0.3.15, which originates from the use of hard-coded credentials that could allow a network-adjacent attacker with...

PT-2024-27006 · Apache · Apache Iotdb Workbench

Name of the Vulnerable Software and Affected Versions: Apache IoTDB Workbench versions 0.13.0 and later Description: A Server-Side Request Forgery SSRF issue affects Apache IoTDB Workbench, allowing an attacker to access the local network. This issue only affects products that are no longer...