14417 matches found
Security Bulletin: Denial of Service in Apache Commons used by WebSphere Application Server affect IBM Operations Analytics - Log Analysis (CVE-2023-24998)
Summary There is a vulnerability in the Apache Commons FileUpload library used by IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request...
From One Vulnerability to Another: Outlook Patch Analysis Reveals Important Flaw in Windows API
...
MAL-2023-1410 Malicious code in spammingsynonym (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97a0609c600ca9bc940340f2595fb41607b5af5c3931f10350bea6aa3c9879ae The OpenSSF Package Analysis project identified 'spammingsynonym' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1411 Malicious code in spammingsynonyms (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b06c2a9bef8741ecd851e448b284d8c0eef63b726a77662a1e4f3aec34119f80 The OpenSSF Package Analysis project identified 'spammingsynonyms' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1409 Malicious code in smsobfuscate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa2efc28ecdebc90e41edd50503e199984f68d05cb13edab8b6e8d503d18e75c The OpenSSF Package Analysis project identified 'smsobfuscate' @ 1.0.1 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1369 Malicious code in iiris-new2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0f584cfefbd98e630ed7a59b892d50d96387e5941f2a09a3543324b1c418396 The OpenSSF Package Analysis project identified 'iiris-new2' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1309 Malicious code in stripe-deep-dup-tree (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29790a4dda8ea513434302f82a02b4ef9cb90fa0b9e63de804082d284c8cb989 The OpenSSF Package Analysis project identified 'stripe-deep-dup-tree' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
MAL-2023-1308 Malicious code in stripe-deep-deep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7158c510e35fd6474a199140be8247cbefc73f5020d7a443927d22a7b555573 The OpenSSF Package Analysis project identified 'stripe-deep-deep' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in stripe-deep-deep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7158c510e35fd6474a199140be8247cbefc73f5020d7a443927d22a7b555573 The OpenSSF Package Analysis project identified 'stripe-deep-deep' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Intel Trace Analyzer And Collector 缓冲区错误漏洞
Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. A security vulnerability exists in Intel Trace Analyzer And Collector versions prior to 2021.8.0 that stems from the presence of a stack-based buffer...
Malicious code in test-test-test-leys-check (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...
MAL-2023-1419 Malicious code in test-test-test-leys-check (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...
MAL-2023-1292 Malicious code in seafoam-desktop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11b7b515412cb320d382cffb4a3abe4fa232556d7db6ac3dde904bd295b279a3 The OpenSSF Package Analysis project identified 'seafoam-desktop' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in paycom-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c80a2de08068c1bfcccc84d1061f40232d518c725dc774ab6ed2f73e25753978 The OpenSSF Package Analysis project identified 'paycom-events' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1264 Malicious code in paycom-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c80a2de08068c1bfcccc84d1061f40232d518c725dc774ab6ed2f73e25753978 The OpenSSF Package Analysis project identified 'paycom-events' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2022-48234
In FM service , there is a possible missing params check. This could lead to local denial of service in FM service...
PT-2025-26115 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A file pointer leak has been identified in the Linux kernel, specifically in the tools/power turbostat component. This issue occurs when a fscanf fails, leading to an early return that...
How to Set Up a Threat Hunting and Threat Intelligence Program
Threat hunting is an essential component of your cybersecurity strategy. Whether you're getting started or in an advanced state, this article will help you ramp up your threat intelligence program. What is Threat Hunting? The cybersecurity industry is shifting from a reactive to a proactive...
MAL-2023-1233 Malicious code in mesbah-unclaim (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 263dd8e3a7c219627fe6ca196c18bb5262996c68f086fd118d74caec6e06aee1 The OpenSSF Package Analysis project identified 'mesbah-unclaim' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
