Debian dla-3486 : ocsinventory-reports - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3486 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3486-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: CVE-2023-32342 may affect GSKit shipped with IBM CICS TX Standard

Summary CVE-2023-32342 may affect GSKit shipped with IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-32342 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel ...

Security Bulletin: Vulberability in Apache commons io library affects IBM Engineering Test Management (ETM) (CVE-2021-29425)

Summary This Security Vulnerablity has been addressed in IBM Engineering Test Management. A fix is available to address the vulnerability. Vulnerability Details CVEID:CVE-2021-29425 DESCRIPTION: Apache Commons IO could allow a remote attacker to traverse directories on the system, caused by...

Security Bulletin: CVE-2023-28867 may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Advanced

Summary CVE-2023-28867 may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-28867 DESCRIPTION: GraphQL Java is vulnerable to a denial of service, caused by a stack-based...

CVE-2023-3514

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral =7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to...

Razer Central security vulnerability

Razer Central is the peripheral control center for Razer Corporation USA. A security vulnerability exists in Razer Central version 7.11.0.558 and earlier, which stems from improper privilege control in the named pipe and allows a malicious attacker with local access to gain system privileges by...

Razer Central security vulnerability

Razer Central is the peripheral control center for Razer Corporation USA. A security vulnerability exists in Razer Central 7.11.0.558 and prior versions, which stems from improper privilege control in the named pipe and allows a malicious attacker with local access to gain system privileges and...

SonicWALL Analytics and GMS authorization issue vulnerabilities

SonicWALL Analytics and SonicWALL GMS are both products of SonicWALL, Inc. of the U.S. SonicWALL Analytics is a high-performance management and reporting engine for the Web.SonicWALL GMS is a global management system. A powerful and intuitive solution for organizations, distributed enterprises an...

Security Bulletin: IBM Sterling Connect:Express for UNIX is vulnerable to a buffer overflow through its browser UI (CVE-2023-32331)

Summary IBM Sterling Connect:Express for UNIX is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI. Vulnerability Details CVEID:CVE-2023-32331 DESCRIPTION: IBM Connect:Express for UNIX is vulnerable to a buffer overflow that cou...

Security Bulletin: IBM Sterling Connect:Express for UNIX browser UI is vulnerable to attacks that rely on the use of cookies without the SameSite attribute

Summary IBM Sterling Connect:Express for UNIX browser UI is vulnerable to attacks that rely on the use of cookies without the SameSite attribute Vulnerability Details CVEID:CVE-2023-29259 DESCRIPTION: IBM Sterling Connect:Express for UNIX browser UI is vulnerable to attacks that rely on the use o...

Security Bulletin: IBM Sterling Connect:Express for UNIX is vulnerable to server-side request forgery (SSRF)

Summary IBM Sterling Connect:Express for UNIX is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. Vulnerability Details...

Security Bulletin: IBM Sterling Connect:Express uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Summary IBM Sterling Connect:Express uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Vulnerability Details CVEID:CVE-2021-38933 DESCRIPTION: IBM Sterling Connect:Direct uses weaker than expected cryptographic algorithms that...

Debian dla-3487 : fusiondirectory - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3487 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3487-1 [email protected]...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects App Connect Professional.

Summary There are multiple vulnerabilities in the IBM SDK Java Technology used by App Connect Professional. These issue were disclosed as part of the IBM Java SDK updates in Jan 2023, App Connect Professional have addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-21830...

PiiGAB M-Bus security vulnerability

PiiGAB M-Bus is a communication protocol from PiiGAB used between meters and centralized data collection systems or prepaid units. A security vulnerability exists in the PiiGAB M-Bus 900S version that stems from the transmission of credentials in clear text format...

Security Bulletin: IBM Connect:Direct Web Services vulnerable to sensitive information exposure due to PostgreSQL (CVE-2022-41862)

Summary IBM Connect:Direct Web Services has addressed a PostgreSQL vulnerability. Vulnerability Details CVEID:CVE-2022-41862 DESCRIPTION: PostgreSQL could allow a remote attacker to obtain sensitive information, caused by a client memory disclosure flaw. By sending an unterminated string during t...

PT-2023-35895 · Unknown · Net.Jsign.Appx

Name of the Vulnerable Software and Affected Versions: net.jsign.appx affected versions not specified Description: A security exception occurs due to a crash in the net.jsign.appx module. The crash happens when reading the Zip64EndOfCentralDirectoryRecord and CentralDirectory in the ZipFile class...

jsign:AuthenticodeAppxSignerFuzzer: Security exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read

Project: https://github.com/ebourg/jsign.git Detailed Report: https://oss-fuzz.com/testcase?key=6359562199105536 Project: jsign Fuzzing Engine: libFuzzer Fuzz Target: AuthenticodeAppxSignerFuzzer Job Type: libfuzzerasanjsign Platform Id: linux Crash Type: Security exception Crash Address: Crash...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to the module xml2js (CVE-2023-0842)

Summary IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to the module xml2js CVE-2023-0842. The latest Fix Pack includes xml2js version 5.0 Vulnerability Details CVEID:CVE-2023-0842 DESCRIPTION: xml2js could allow a remote attacker to execute arbitrary...

Security Bulletin: CVE-2022-21426 may affect IBM® SDK, Java™ Technology Edition shipped with IBM CICS TX Standard

Summary CVE-2022-21426 may affect IBM® SDK, Java™ Technology Edition shipped with IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-21426 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow ...