5480 matches found
CVE-2025-26382 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
Under certain circumstances the iSTAR Configuration Utility ICU tool could have a buffer overflow issue...
CVE-2025-26382 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
Under certain circumstances the iSTAR Configuration Utility ICU tool could have a buffer overflow issue...
CVE-2025-26382
Johnson Controls iSTAR Configuration Utility (ICU) Tool is affected by CVE-2025-26382 due to a buffer overflow under certain circumstances. The tool/process can lead to arbitrary code execution with high impact to confidentiality, integrity, and availability, per CVSS metrics (CRITICAL, network a...
PT-2025-17851 · Unknown · Istar Configuration Utility
Name of the Vulnerable Software and Affected Versions: iSTAR Configuration Utility ICU affected versions not specified Description: The issue is related to a buffer overflow that could occur under certain circumstances in the iSTAR Configuration Utility ICU tool. Recommendations: At the moment,...
Johnson Controls iSTAR Configuration Utility 安全漏洞
The Johnson Controls iSTAR Configuration Utility is a software tool for configuring and managing iSTAR Controllers from Johnson Controls, Inc. A security vulnerability exists in the Johnson Controls iSTAR Configuration Utility that originates from a buffer overflow issue...
Optimizing the Privacy-Utility Balance Using Synthetic Data and Configurable Perturbation Pipelines
This paper explores the strategic use of modern synthetic data generation and advanced data perturbation techniques to enhance security, maintain analytical utility, and improve operational efficiency when managing large datasets, with a particular focus on the Banking, Financial Services, and...
Security Bulletin: Multiple vulnerabilities in Eclipse affect IBM Installation Manager and IBM Packaging Utility
Summary There are multiple vulnerabilities in Eclipse used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2022-2191 DESCRIPTION: Eclipse Jetty is vulnerable to a...
Dual Utilization of Perturbation for Stream Data Publication under Local Differential Privacy
Stream data from real-time distributed systems such as IoT, tele-health, and crowdsourcing has become an important data source. However, the collection and analysis of user-generated stream data raise privacy concerns due to the potential exposure of sensitive information. To address these...
Reveal-Or-Obscure: a Differentially Private Sampling Algorithm for Discrete Distributions
We introduce a differentially private DP algorithm called reveal-or-obscure ROO to generate a single representative sample from a dataset of $n$ observations drawn i.i.d. from an unknown discrete distribution $P$. Unlike methods that add explicit noise to the estimated empirical distribution, ROO...
Do You Really Need Public Data? Surrogate Public Data for Differential Privacy on Tabular Data
Differentially private DP machine learning often relies on the availability of public data for tasks like privacy-utility trade-off estimation, hyperparameter tuning, and pretraining. While public data assumptions may be reasonable in text and image domains, they are less likely to hold for tabul...
Benchmarking Differentially Private Tabular Data Synthesis
Differentially private DP tabular data synthesis generates artificial data that preserves the statistical properties of private data while safeguarding individual privacy. The emergence of diverse algorithms in recent years has introduced challenges in practical applications, such as inconsistent...
Security Bulletin: IBM MaaS360 Cloud Extender Agent, Configuration Utility and Mobile Enterprise Gateway (MEG) affected by multiple vulnerabilities (CVE-2024-21907, CVE-2023-39017, CVE-2024-40642, CVE-2015-2325)
Summary Vulnerabilities contained within newtonsoft.json 3rd party components were addressed in the IBM MaaS360 Cloud Extender Agent, Configuration Utility. Vulnerabilities contained within Netty 3rd party components were addressed in the IBM MaaS360 Mobile Enterprise Gateway MEG Module...
Security Bulletin: IBM MaaS360 Cloud Extender Agent, Configuration Utility, Email Notification, Real Time Action and Base Module affected by multiple vulnerabilities (CVE-2023-46219, CVE-2023-46218, CVE-2023-52071, CVE-2024-0853)
Summary Vulnerabilities contained within libcurl a 3rd party component were addressed in the IBM MaaS360 Cloud Extender Agent, Configuration Utility, Email Notification, Realtime Action and Base Modules. Vulnerability Details CVEID:CVE-2023-46219 DESCRIPTION: cURL libcurl could allow a remote...
EulerOS 2.0 SP11 : openjpeg2 (EulerOS-SA-2025-1365)
According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-1470 DESCRIPTION: In...
PT-2025-16256 · Undefined · Undefined
Уязвимость утилиты gifinto библиотеки для работы с GIF файлами GIFLIB связана с ошибками в обработке относительного пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код путем записи специально сформированного GIF-файла в произвольн...
CVE-2025-31690
Cross-Site Request Forgery CSRF vulnerability in Drupal Cache Utility allows Cross Site Request Forgery.This issue affects Cache Utility: from 0.0.0 before 1.2.1...
CVE-2025-3008
A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/popen of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation leads to command injection. The exploit has been disclosed to the public and may be...
CVE-2025-3007
A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation of the argument cmd/netmask/pipeout/nettask leads to stack-based buffer overflow...