CVE-2024-39750 IBM Analytics Content Hub buffer overflow

IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash...

PT-2025-2551 · Ibm · Ibm Analytics Content Hub

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub version 2.0 Description: The issue is related to a buffer overflow in the IBM Analytics Content Hub due to improper return length checking. This can be exploited by a remote authenticated attacker to execute arbitrar...

PT-2025-2430 · Ibm · Ibm Analytics Content Hub

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub version 2.0 Description: The issue is related to the mechanism of forming error reports in IBM Analytics Content Hub, which could allow a remote attacker to obtain sensitive information when a detailed technical erro...

CVE-2024-40693

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing furth...

CVE-2024-40693

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing furth...

CVE-2024-25034

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attac...

CVE-2024-25034

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attac...

CVE-2024-40693 IBM Planning Analytics file upload

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing furth...

CVE-2024-40693 IBM Planning Analytics file upload

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing furth...

CVE-2024-40693

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a malicious file upload via the web interface due to lack of content validation. This could allow uploading executable files leading to compromise of victims. Remediation per IBM Security Bulletin: upgrade to IBM Planning Analytics Workspace re...

CVE-2024-25034 IBM Planning Analytics file upload

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attac...

CVE-2024-25034

CVE-2024-25034 affects IBM Planning Analytics 2.0 and 2.1, where the File Manager T1 process does not validate file types, allowing upload of executable/malicious files. IBM’s Security Bulletin notes this as a Malicious File Upload vulnerability (CWE-434) with high impact (CVE has base scores up ...

CVE-2024-25034 IBM Planning Analytics file upload

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attac...

Malicious code in meli-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb28bf7bab07e7d8ce966bd32c13cf1917b50adade7a33b66bb6e39c74710827 The OpenSSF Package Analysis project identified 'meli-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-544 Malicious code in meli-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb28bf7bab07e7d8ce966bd32c13cf1917b50adade7a33b66bb6e39c74710827 The OpenSSF Package Analysis project identified 'meli-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45ea901132edd2a569f451644d222beedfd715a037c809451b5ac84bd1e506a1 The OpenSSF Package Analysis project identified 'lyft-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-521 Malicious code in lyft-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45ea901132edd2a569f451644d222beedfd715a037c809451b5ac84bd1e506a1 The OpenSSF Package Analysis project identified 'lyft-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-510 Malicious code in linkedin-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a93b00bc04ea5218384795d0a4ce28aef30047e797c5bfa33e15d2e7b799011 The OpenSSF Package Analysis project identified 'linkedin-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in linkedin-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a93b00bc04ea5218384795d0a4ce28aef30047e797c5bfa33e15d2e7b799011 The OpenSSF Package Analysis project identified 'linkedin-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-483 Malicious code in iberia-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbeb23de83ef06752a7c78f785f0b4cde49252cd16b137dd3e3fec73e2714bfc The OpenSSF Package Analysis project identified 'iberia-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...