115 matches found
Security Bulletin:Multiple vulnerabilities in jackson-core may affect IBM Infosphere Change Data Capture (CVE-2026-89407, CVE-2026-89425)
Summary Multiple security vulnerabilities have been identified in jackson-core, Core Jackson processing abstractions. jackson-core is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details...
Security Bulletin:Vulnerability in netty-codec-redis may affect IBM Infosphere Change Data Capture (CVE-2026-93572)
Summary A security vulnerability has been identified in netty-codec-redis, Netty/Codec/Redis. netty-codec-redis is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...
Security Bulletin:Multiple vulnerabilities in netty-codec-smtp may affect IBM Infosphere Change Data Capture (CVE-2026-93563, CVE-2026-93576)
Summary Multiple security vulnerabilities have been identified in netty-codec-smtp, Netty/Codec/SMTP. netty-codec-smtp is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
Security Bulletin:Multiple vulnerabilities in netty-codec-stomp may affect IBM Infosphere Change Data Capture (CVE-2026-93494, CVE-2026-93560)
Summary Multiple security vulnerabilities have been identified in netty-codec-stomp, Netty/Codec/Stomp. netty-codec-stomp is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
Security Bulletin:Vulnerability in netty-codec-memcache may affect IBM Infosphere Change Data Capture (CVE-2026-93561)
Summary A security vulnerability has been identified in netty-codec-memcache, . netty-codec-memcache is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...
Security Bulletin:Multiple vulnerabilities in bcpkix-jdk18on may affect IBM Infosphere Change Data Capture (CVE-2026-17508, CVE-2026-18036)
Summary Multiple security vulnerabilities have been identified in bcpkix-jdk18on, the Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. bcpkix-jdk18on is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the...
Security Bulletin:Multiple vulnerabilities in lz4-java may affect IBM Infosphere Change Data Capture (CVE-2026-106449, CVE-2026-106450, CVE-2026-106451)
Summary Multiple security vulnerabilities have been identified in lz4-java, Java bindings and pure Java implementations of LZ4 and XXHash. lz4-java is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediatio...
Security Bulletin:Multiple vulnerabilities in jackson-databind may affect IBM Infosphere Change Data Capture (CVE-2026-91776, CVE-2026-91777)
Summary Multiple security vulnerabilities have been identified in jackson-databind, General data-binding functionality for Jackson. jackson-databind is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediati...
Security Bulletin:Multiple vulnerabilities in jackson-databind may affect IBM Infosphere Change Data Capture (CVE-2026-19032, CVE-2026-83557)
Summary Multiple security vulnerabilities have been identified in jackson-databind, General data-binding functionality for Jackson. jackson-databind is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediati...
CVE-2026-40830 Authenticated SQLi in UpdateParam function
A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical...
Open5GS security vulnerabilities
Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.7 and earlier contain security vulnerabilities. These vulnerabilities stem from the amfnamfcallbackhandlesdmdatachangenotify function in the AMF...
tpm2_checkquote Component Access
The vulnerability of the tpm2checkquote component in the Trusted Platform Module tools repository is related to incorrect data regarding changes. Exploiting this vulnerability can allow an attacker to gain access to protected information through specially crafted queries...
GHSA-WQM3-W3P6-XJGM Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...
Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via the quote function that fails to properly escape special characters. An attacker can execute arbitrary SQL commands by supplying specially crafted input values for database name or table names. Remediation Upgrade...
PT-2025-41380
Name of the Vulnerable Software and Affected Versions Apache Flink CDC version 3.4.0 Description The software is susceptible to a SQL injection due to maliciously crafted identifiers, such as a crafted database name or table name. The attack can only be triggered by a logged-in database user...
EUVD-2005-3437
Malware in sbrugna...
EUVD-2007-2110
Malware in sbrugna...