110 matches found
Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in Bouncy Castle for Java
Summary The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in Bouncy Castle for Java. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-12185 DESCRIPTION: In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates...
@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...
@sap/cds-dk (>=6.8.0, <=6.8.3) potentially affected by CVE-2026-76969 via @sap/cds-mtxs (1.8.5)
@sap/cds-mtxs NPM version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/cds-mtxs and may be impacted: - @sap/cds-dk =6.8.0, =6.8.3 Source cves: CVE-2026-76969 Source advisory: OSV:GHSA-955M-RR6M-2F9V...
GHSA-955M-RR6M-2F9V @sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...
CVE-2026-76969
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...
CVE-2026-76969 Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...
CVE-2026-76969
The @sap/cds-mtxs NPM library used in SAP Cloud Application Programming Model (CAP) multitenant applications with extensibility enabled does not perform sufficient checks on certain functionality, allowing an unauthenticated attacker to send specially crafted requests to obtain sensitive credenti...
EUVD-2026-72586
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...
CVE-2026-76969 Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...
CVE-2026-76969: Insufficiently Protected Credentials
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...
PT-2026-86961
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...
Malicious code in wallet-cds-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a2fd556bde6edbeed9d4c1ebd8dcf4b1c24a5dfda8d70d6cb91cfc7ee3fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16040 Malicious code in wallet-cds-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a2fd556bde6edbeed9d4c1ebd8dcf4b1c24a5dfda8d70d6cb91cfc7ee3fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview wallet-cds-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Embedded Malicious Code
Overview @cap-js/db-service is a CDS base database service Affected versions of this package are vulnerable to Embedded Malicious Code that conceals an obfuscated payload designed to steal developer credentials during the package installation. The malicious versions and their contents are activel...
[SECURITY] Fedora 42 Update: aqualung-1.2-10.fc42
Aqualung is an advanced music player originally targeted at the GNU/Linux operating system. It plays audio CDs, internet radio streams and pod casts as well as sound files in just about any audio format and has the feature of inserting no gaps between adjacent tracks...
[SECURITY] Fedora 43 Update: aqualung-1.2-12.fc43
Aqualung is an advanced music player originally targeted at the GNU/Linux operating system. It plays audio CDs, internet radio streams and pod casts as well as sound files in just about any audio format and has the feature of inserting no gaps between adjacent tracks...
EUVD-2019-18312
Malware in sbrugna...