13151 matches found
CVE-2023-31226
The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affect confidentiality...
.NET 7.0 bugfix update
An update is available for dotnet7.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...
Security Bulletin: Vulnerability in IBM® Runtime Environment Java™ Version 8 affect Cloud Pak System. [CVE-2023-30441]
Summary Vulnerability in IBM® Runtime Environment Java™ Version 8 used by Cloud Pak System. Cloud Pak System has addressed vulnerability. CVE-2023-30441 Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through...
Malicious code in payouts-sdk-samples (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3db91ea244189b9afd98f67f2aa7ce4dd00812c2ab83bba670a7f9d285cf167 The OpenSSF Package Analysis project identified 'payouts-sdk-samples' @ 99.20.20 npm as malicious. It is considered malicious because: - The...
Security Bulletin: A vulnerability in IBM SDK, Java Technology Edition affect IBM Operations Analytics Predictive Insights
Summary A security vulnerability in IBM SDK, Java Technology Edition affects IBM Operations Analytics Predictive Insights 1.3.6 or earlier. IBM Java versions 8.0.7.0 - 8.0.7.11 are vulnerable to crypto attacks. This vulnerability has been addressed. Vulnerability Details Refer to the security...
Security Bulletin: Multiple Security Vulnerabilities have been fixed in the IBM Directory Server and IBM Directory Suite products (CVE-2022-21496, CVE-2021-35550, CVE-2021-2163, CVE-2021-35603)
Summary Multiple Security Vulnerabilities in the IBM Java SDK as shipped with the IBM Directory Server and IBM Directory Suite products have been fixed. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an...
Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to exposing sensitive information due to flaws and configurations (CVE-2023-30441).
Summary IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i are vulnerable to exposing sensitive information using a combination of flaws and configurations as described in the vulnerability details section. The vulnerability is fixed by applying an IBM i Group PTF...
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are affected by a vulnerability in the IBM SDK, Java Technology Edition [CVE-2023-30441]
Summary IBM App Connect Enterprise and IBM Integration Bus are affected by a vulnerability in the IBM SDK, Java Technology Edition CVE-2023-30441. A workaround has been provided. Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus an...
Security Bulletin: A vulnerability in IBM Java SDK affects IBM Tivoli Monitoring for Virtual Environments Agent for Linux Kernel-based Virtual Machines (CVE-2023-30441)
Summary The security issue described in CVE-2023-30441 has been identified in IBM Tivoli Monitoring for Virtual Environments Agent for Linux Kernel-based Virtual Machines Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE...
Security Bulletin: A vulnerability in IBM Java SDK affects IBM Tivoli Monitoring for Virtual Environments Base(CVE-2023-30441)
Summary The security issue described in CVE-2023-30441 has been identified in IBM Tivoli Monitoring for Virtual Environments Base VMware Agent Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11...
@0xagnish/circom2-create-project (1.0.412), @0xagnish/create-circom2-project (>=1.0.0, <=1.0.418) +329 more potentially affected by CVE-2023-33252 via snarkjs (>=0.1.7, <=0.6.11)
snarkjs NPM version =0.1.7, =1.0.0, =1.0.0, =1.0.0-beta.0, =1.0.0, =1.1.1, =2.0.0-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1, =0.0.1, =0.1.0, =0.2.2 and more Source cves: CVE-2023-33252 Source advisory: OSV:GHSA-XP5G-JHG3-3RG2...
Security Bulletin: IBM Security Guardium is affected by an AWS SDK vulnerability (CVE-2022-31159)
Summary IBM Security Guardium has fixed this vulnerability. Instructions for obtaining the fix are below. Vulnerability Details CVEID:CVE-2022-31159 DESCRIPTION: AWS SDK for Java could allow a remote authenticated attacker to traverse directories on the system, caused by a flaw in the...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by AIX. AIX has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21426 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated...
Security Bulletin: Security vulnerability in IBM Java SDK affect IBM Tivoli Netcool Impact (CVE-2023-30441)
Summary IBM® SDK Java™ Technology Edition is shipped as a component of IBM Tivoli Netcool Impact. IBM Tivoli Netcool Impact has addressed the applicable issue, CVE-2023-30441. Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and...
Security Bulletin: Vulnerability in IBM Java SDK affects IBM Tivoli Business Service Manager (CVE-2023-30441)
Summary IBM® SDK Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. IBM Tivoli Business Service Manager has addressed the applicable issue, CVE-2023-30441. Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology...
MAL-2023-1236 Malicious code in microsoft.quantum.sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cfe7f01c2851d89caea2832921f637fe33c9ba87bb2421a8005fcb0295cb2e6 The OpenSSF Package Analysis project identified 'microsoft.quantum.sdk' @ 0.28.263081 npm as malicious. It is considered malicious because: - Th...
Multiple vulnerabilities in IBM Java SDK affect AIX
IBM SECURITY ADVISORY First Issued: Fri May 19 10:29:25 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/javamay2023advisory.asc Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX...
.NET 7.0 bugfix update
An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...
