Azure Linux 3.0 Security Update: kernel (CVE-2024-45026)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45026 advisory. - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to...

Stealthone D220 and Stealthone D340 have operating system command injection vulnerabilities

The STEALTHONE D220 and STEALTHONE D340 are both network storage servers from STEALTHONE. An operating system command injection vulnerability exists in the STEALTHONE D220 and STEALTHONE D340, which can be exploited to execute arbitrary operating system commands by an attacker with access to the...

CVE-2024-45026

CVE-2024-45026 : In the Linux kernel (s390 DASD), data corruption could occur on Extent Space Efficient (ESE) or thin-provisioned volumes during error scenarios. The root cause was an imprecise length check in dasd_ese_needs_format that could mis-handle certain transport errors, potentially corru...

Update Rollup 4 for Windows Server Solutions Best Practices Analyzer 1.0 is available

Update Rollup 4 for Windows Server Solutions Best Practices Analyzer 1.0 is available Applies To Windows Small Business Server 2011 Essentials Windows Small Business Server 2011 Standard Windows MultiPoint Server 2011 Premium Windows MultiPoint Server 2011 Standard Windows Storage Server 2008 R2...

An update for Windows Server Solutions Best Practices Analyzer 1.0 is available

An update for Windows Server Solutions Best Practices Analyzer 1.0 is available Applies To Windows Small Business Server 2011 Essentials Windows Small Business Server 2011 Standard Windows MultiPoint Server 2011 Standard Windows MultiPoint Server 2011 Premium Windows Storage Server 2008 R2...

Update 2 for Windows Server Solutions Best Practices Analyzer 1.0 is available

Update 2 for Windows Server Solutions Best Practices Analyzer 1.0 is available Applies To Windows Small Business Server 2011 Standard Windows Small Business Server 2011 Essentials Windows MultiPoint Server 2011 Standard Windows MultiPoint Server 2011 Premium Windows Storage Server 2008 R2...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Storage Scale packaged in Elastic Storage Server

Summary There are multiple vulnerabilities in Java™ Technology Edition used by the Elastic Storage Server. Fixes for all these vulnerabilities are available. CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926, CVE-2024-20945. Vulnerability Details CVEID:CVE-2024-20952...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Storage Scale packaged in Elastic Storage Server.

Summary There is a vulnerability in IBM WebSphere Application Server Liberty, used by IBM Elastic Storage Server, which could allow a remote attacker to cause a denial of service. CVE-2023-46158, CVE-2023-44487. Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Storage Scale packaged in Elastic Storage Server

Summary There are multiple vulnerabilities in Java™ Technology Edition used by the Elastic Storage Server. Fixes for all these vulnerabilities are available. Vulnerability Details CVEID:CVE-2023-22045 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a...

Security Bulletin: A vulnerability in IBM WebSphere Application Server Liberty affects IBM Storage Scale packaged in IBM Elastic Storage Server (CVE-2023-24998)

Summary There is a vulnerability in IBM WebSphere Application Server Liberty, used by IBM Elastic Storage Server, which could allow a remote attacker to cause a denial of service. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a deni...

org.apache.bookkeeper.tests:stream-storage-integration-test (4.7.0), org.apache.bookkeeper:stream-storage-server (4.7.0) +1 more potentially affected by CVE-2023-38647 via org.apache.helix:helix-core (0.6.7)

org.apache.helix:helix-core MAVEN version 0.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.helix:helix-core and may be impacted: - org.apache.bookkeeper.tests:stream-storage-integration-test 4.7.0 -...

MinIO Information Disclosure Vulnerability

MinIO is an open source object storage server from MinIO, Inc. The product supports building infrastructure for machine learning, analytics, and application data workloads.MinIO is vulnerable to an information disclosure vulnerability that stems from the fact that in a cluster deployment MinIO...

SUSE CVE-2009-2701

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

SUSE CVE-2010-3495

Race condition in ZEO/StorageServer.py in Zope Object Database ZODB before 3.10.0 allows remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpect...

SUSE CVE-2017-1304

IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server ESS/GPFS Storage Server GSS during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a...

CVE-2023-21699

Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...

Security Bulletin: A vulnerability in IBM WebSphere Application Server Liberty affects IBM Spectrum Scale packaged in IBM Elastic Storage Server

Summary There is a vulnerability in IBM WebSphere Application Server Liberty, used by IBM Elastic Storage Server, which could allow a remote attacker to cause a denial of service. Vulnerability Details CVEID:CVE-2022-22476 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through...

Security Bulletin: A vulnerability in IBM WebSphere Application Server Liberty affects IBM Spectrum Scale packaged in IBM Elastic Storage Server (CVE-2022-34165)

Summary There is a vulnerability in IBM WebSphere Application Server Liberty, used by IBM Elastic Storage Server, which could allow a remote attacker to cause cache poisoning and cross-site scripting. Vulnerability Details CVEID:CVE-2022-34165 DESCRIPTION: IBM WebSphere Application Server 7.0, 8....

Security Bulletin: Vulnerability in PostgreSQL may affect IBM Elastic Storage System

Summary PostgreSQL could allow a remote attacker to gain unauthorized access to the system which may affect IBM Elastic Storage System. Vulnerability Details CVEID:CVE-2022-1552 DESCRIPTION: PostgreSQL remote authenticated attacker to bypass security restrictions, caused by an issue with not...

Security Bulletin: Multiple vulnerabilities in IBM JAVA JDK affects IBM Spectrum Scale packaged in IBM Elastic Storage System.

Summary Multiple vulnerabilities in IBM Java JDK, used by IBM Elastic Storage System GUI, which could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact and no availability impact. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified...