179 matches found
CVE-2025-13379
IBM Aspera Console is affected: versions 3.4.0–3.4.8 are vulnerable to SQL injection (CWE-89). A remote attacker could craft SQL statements to view, add, modify, or delete data in the back-end database. The issue has been addressed in IBM Aspera Console 3.4.8 FP1; upgrading to this fix version is...
PT-2026-6553
Name of the Vulnerable Software and Affected Versions IBM Aspera Console versions 3.4.0 through 3.4.8 Description The software is susceptible to a SQL injection issue. A remote attacker could potentially send crafted SQL statements to access, modify, or delete data within the back-end database. T...
Security Bulletin: A SQL Injection vulnerability has been addressed in IBM Aspera Console
Summary A SQL Injection attack could allow specially crafted SQL statements into the appication which could impact the data in the back-end database. This issue has been addressed in IBM Aspera Console version 3.4.8 FP1. Vulnerability Details CVEID:CVE-2025-13379 DESCRIPTION: IBM Aspera Console i...
IBM Aspera Console Log Message Disclosure Vulnerability
IBM Aspera Console is a Web-based application from International Business Machines IBM. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. IBM Aspera Console suffers from a log information disclosure vulnerability that originates from the storage of...
CVE-2025-13925
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user...
CVE-2025-13925
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user...
CVE-2025-13925
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user...
CVE-2025-13925
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user...
CVE-2025-13925
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user. Affected product: IBM Aspera Console 3.4.7. Root cause: log files may contain sensitive data, enabling read access by an unauthorized local user. Remediation: upgrade to I...
CVE-2025-13925 Multiple vulnerabilities in IBM Aspera Console
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user...
CVE-2025-13925 Multiple vulnerabilities in IBM Aspera Console
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user...
PT-2026-3580
Name of the Vulnerable Software and Affected Versions IBM Aspera Console version 3.4.7 Description The software stores potentially sensitive information in log files. A local privileged user could read this information. Recommendations Ensure appropriate access controls are in place for log files...
IBM Aspera Console 日志信息泄露漏洞
IBM Aspera Console is a Web-based application from International Business Machines IBM. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. IBM Aspera Console suffers from a log information disclosure vulnerability that originates from the storage of...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Console
Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.8. Vulnerability Details CVEID:CVE-2025-61780 DESCRIPTION: Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in...
EUVD-2021-25400
Malware in sbrugna...
EUVD-2021-25364
Malware in sbrugna...
EUVD-2022-46423
Malicious code in bioql PyPI...
EUVD-2023-31050
Malicious code in bioql PyPI...