1719 matches found
PT-2023-34617
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to the powerpc/rtas component, specifically in the rtas os term function. The problem arises when scheduling is not properly avoided in this function. The actual impact a...
PT-2023-34358
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the powerpc/rtas component, specifically in the rtas os term function. It has been identified as a potential security concern, although the actual impact and attack...
PT-2023-33997
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.87 Description The issue is related to device tree lookups in the rtas os term function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2023-33539
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.17 Description The issue is related to device tree lookups in the rtas os term function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2023-34359
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to device tree lookups in the rtas os term function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...
GHSA-Q2FJ-6H62-59M2 Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue
Impact If you are using the Apiman Vert.x Gateway prior to Apiman 3.0.0.Final, a connection caching issue in Hazelcast could allow an unauthenticated, remote attacker to access and manipulate data in the cluster with another authenticated connection's identity. Hazelcast is a transitive dependenc...
CVE-2022-1887
The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iOS 101...
CVE-2022-1887: Improper Neutralization of Special Elements used in an SQL Command
The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iOS 101...
PowerShell LTS v7.2.8 (x64)
Install or update to PowerShell Long Term Support version v7.2.8 x64...
OpenHarmony 缓冲区错误漏洞
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony kernelliteosa, which originates from a kernel stack overflow in the kernel subsystem during a call to SysClockGetres,...
PT-2025-40738
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc5-02182-gf8553a572277 Description The Linux kernel contains a flaw in the powerpc/rtas subsystem. Specifically, it is unsafe to use rtas busy delay to handle a busy status from the ibm,os-term RTAS functi...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to denial of service due to CVE-2022-0561
Summary LibTIFF is not used directly by IBM App Connect Enterprise Certified Container but is present in the DesignerAuthoring image used for mapping assistance, which may be vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to arbitrary code execution due to CVE-2022-1355
Summary LibTIFF is not used directly by IBM App Connect Enterprise Certified Container but is present in the DesignerAuthoring image used for mapping assistance, which may be vulnerable to arbitrary code execution or denial of service. This bulletin provides patch information to address the...
Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to arbitrary code execution due to CVE-2015-20107
Summary Python is provided as part of the operating system modules in the IBM App Connect Enterprise Certified Container images, and is used by DesignerAuthoring instances when mapping assistance is enabled. IBM App Connect Enterprise Certified Container images may be vulnerable to arbitrary code...
CVE-2022-4093
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In...
CVE-2022-4093 SQL Injection in dolibarr/dolibarr
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In...
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to CVE-2022-36083
Summary Node.js module jose is used by IBM App Connect Enterprise Certified Container for securing internal communications and in connections by connectors to SaaS endpoints. IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service. This bulletin provides pat...
Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to loss of confidentiality due to CVE-2022-29244
Summary Node.js is used by all IBM App Connect Enterprise Certified Container operands. IBM App Connect Enterprise Certified Container operands may be vulnerable to loss of confidentiality. This bulletin provides patch information to address the reported vulnerability CVE-2022-29244 in Node.js...
Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer operands that process yaml files may be vulnerable to denial of service due to CVE-2022-25857
Summary SnakeYAML is used by IBM App Connect Enterprise Certified Container for parsing YAML files, including IntegrationServer configuration files. IBM App Connect Enterprise Certified Container IntegrationServer operands may be vulnerable to denial of service. This bulletin provides patch...