7983 matches found
Malicious code in gd-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b32271b26a173bfc5332412def45e9a44e7c06b81602c052f488a3994d9d65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3302 Malicious code in gd-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b32271b26a173bfc5332412def45e9a44e7c06b81602c052f488a3994d9d65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-122 Malicious code in @bitmex-frontend-team/segment-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3be52fff1327aa2cd3337a927eff4fcf771e6042a6284a1efe3e8032c4012019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bitmex-frontend-team/segment-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3be52fff1327aa2cd3337a927eff4fcf771e6042a6284a1efe3e8032c4012019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: IBM Analytic Accelerator Framework for Communication Service Providers & IBM Customer and Network Analytics for Communications Service Providers and Datasets Impacted by Log4j Vulnerabilities ( CVE-2021-44832)
Summary Apache Log4j is used by as part of its logging infrastructure by IBM Analytic Accelerator Framework for Communication Service Providers AAF and IBM Customer and Network Analytics for Communications Service Providers and Datasets CNA. These products are vulnerable to CVE-2021-44832. The fi...
Security Bulletin: IBM Analytic Accelerator Framework for Communication Service Providers & IBM Customer and Network Analytics for Communications Service Providers and Datasets Impacted by Log4j Vulnerabilities (CVE-2021-45046, CVE-2021-45105)
Summary Apache Log4j is used by as part of its logging infrastructure by IBM Analytic Accelerator Framework for Communication Service Providers AAF and IBM Customer and Network Analytics for Communications Service Providers and Datasets CNA. These products are vulnerable to CVE-2021-45105 and...
Microsoft Azure 安全漏洞
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure. The following products and versions are affected: Azure Automation State Configuration, DSC Extension, Azure...
The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially crafted file...
Vulnerabilities in SICK Package Analytics
SICK received a report about multiple vulnerabilities in the SICK Package Analytics. The vulnerabilities result from the used MySQL database with version 5.7.25. The vulnerable MySQL version include Buffer-Overflow, Improper Access Control, and Improper Certification Validation vulnerabilities...
Security Bulletin: Publicly disclosed vulnerability in GNU binutils affects IBM Netezza Analytics
Summary GNU binutils is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVE by upgrading GNU binutils to latest version 2.37 Vulnerability Details CVEID:CVE-2021-3549 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds flaw ...
Security Bulletin: Publicly disclosed vulnerability vulnerability in GNU binutils affects IBM Netezza Analytics for NPS
Summary GNU binutils is used by IBM Netezza Analytics for NPS. IBM Netezza Analytics for NPS has addressed the applicable CVE by upgrading GNU binutils to version 2.37. Vulnerability Details CVEID:CVE-2021-3549 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an...
Security Bulletin: Log4j vulnerability affects IBM Netezza Analytics for NPS
Summary IBM Netezza Analytics for NPS uses Log4j version 1.x. IBM Netezza Analytics for NPS has addressed the aplicable CVE Vulnerability Details CVEID:CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of...
Security Bulletin: Log4j vulnerabilities affect IBM Netezza Analytics
Summary IBM Netezza Analytics uses Log4j version 1.x. IBM Netezza Analytics has addressed the aplicable CVEs Vulnerability Details CVEID:CVE-2022-23302 DESCRIPTION: Apache Log4j could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserializatio...
Security Bulletin: Expat vulnerabilities affect IBM Netezza Analytics for NPS
Summary IBM Netezza Analytics for NPS uses Expat version 2.2.0. IBM Netezza Analytics for NPS has addressed the applicable CVEs by upgrading Expat to version 2.4.7. Vulnerability Details CVEID: CVE-2022-23852 DESCRIPTION: Expat aka libexpat could allow a remote attacker to execute arbitrary code ...
Security Bulletin: Expat vulnerabilities affect IBM Netezza Analytics
Summary IBM Netezza Analytics uses Expat version 2.2.8. IBM Netezza Analytics has addressed the applicable CVEs by upgrading Expat to version 2.4.7. Vulnerability Details CVEID: CVE-2022-25236 DESCRIPTION: libexpat is vulnerable to a denial of service, caused by improper protection against...
Security Bulletin: Publicly disclosed vulnerabilities in Plexus-utils affect IBM Netezza Analytics
Summary Plexus-utils is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs Vulnerability Details CVEID:CVE-2017-1000487 DESCRIPTION: Plexus-utils could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of...
Security Bulletin: Log4j vulnerabilities affect IBM Netezza Analytics for NPS
Summary IBM Netezza Analytics for NPS uses Log4j version 1.x. IBM Netezza Analytics for NPS has addressed the aplicable CVEs Vulnerability Details CVEID:CVE-2022-23302 DESCRIPTION: Apache Log4j could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsaf...
Security Bulletin: Publicly disclosed vulnerability in GNU binutils affects IBM Netezza Analytics for NPS
Summary GNU binutils is used by IBM Netezza Analytics for NPS. IBM Netezza Analytics for NPS has addressed the applicable CVE by upgrading GNU binutils to version 2.38. Vulnerability Details CVEID:CVE-2021-45078 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an...
Security Bulletin: IBM Operations Analytics Predictive Insights is vulnerable to remote code execution (CVE-2021-23450)
Summary IBM Websphere Application Server WAS is shipped as a component of IBM Operations Analytics Predictive Insights. Information about WAS Information disclosure vulnerability CVE-2021-23450 which allows a remote user to execute arbitrary code in the browser. This has been addressed and...
