Security Bulletin: Multiple vulnerabilities in IBM's Common Cryptographic Architecture (CCA). CVE-2023-33855, CVE-2023-47150

Summary IBM Common Cryptographic Architecture CCA is used to interface with the IBM Hardware Security Module HSM. CCA could allow a remote user to cause a denial of service attack CVE-2023-47150 or to obtain sensitive information CVE-2023-33855 as described in the vulnerability details section. I...

CVE-2007-3644

creationtimestamp| type| source ---|---|--- 2024-03-25 11:49:23+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3889 2024-03-25 14:38:09+00:00| seen| Telegram/HKj6TR4hMohrGsEUcNFDijNGdim3MCZhggfzha3EYtXw 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/4400 2024-03-25...

PT-2024-2448 · Rockwell Automation · Powerflex 527

Name of the Vulnerable Software and Affected Versions: Rockwell Automation PowerFlex 527 affected versions not specified Description: A denial-of-service issue exists due to improper input validation in the device. If exploited, it can cause a disruption in the CIP communication, requiring a manu...

CVE-2023-32259

creationtimestamp| type| source ---|---|--- 2024-03-19 17:26:49+00:00| seen| https://t.me/ctinow/211726 2024-03-19 17:27:10+00:00| seen| https://t.me/ctinow/211743...

CVE-2019-16717

creationtimestamp| type| source ---|---|--- 2024-03-19 16:41:55+00:00| seen| https://t.me/ctinow/211697...

SUSE CVE-2021-47115

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2018-20498

creationtimestamp| type| source ---|---|--- 2024-03-18 13:46:49+00:00| seen| https://t.me/ctinow/210511...

CVE-2019-20058

creationtimestamp| type| source ---|---|--- 2024-03-18 09:41:37+00:00| seen| https://t.me/ctinow/210310...

The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure of Hitachi Ops Center Common Services arises from the unlimited distribution of resources. This allows a malicious actor to cause service failures.

The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure of the Hitachi Ops Center Common Services is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2019-4744

creationtimestamp| type| source ---|---|--- 2024-03-16 11:51:19+00:00| seen| https://t.me/ctinow/209499...

CVE-2019-0131

creationtimestamp| type| source ---|---|--- 2024-03-15 12:17:05+00:00| seen| https://t.me/ctinow/208675...

CVE-2024-2490

creationtimestamp| type| source ---|---|--- 2024-03-15 11:26:32+00:00| seen| https://t.me/ctinow/208630 2024-03-15 11:26:56+00:00| seen| https://t.me/ctinow/208646 2024-03-16 21:08:16+00:00| seen| https://t.me/arpsyndicate/4255...

CVE-2019-19829

creationtimestamp| type| source ---|---|--- 2024-03-15 07:41:36+00:00| seen| https://t.me/ctinow/208474...

CVE-2024-25653

creationtimestamp| type| source ---|---|--- 2024-03-14 04:21:54+00:00| seen| https://t.me/ctinow/207424 2024-03-14 04:26:52+00:00| seen| https://t.me/ctinow/207435...

Debian dsa-5640 : openvswitch-common - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5640 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5640...

IBM Common Licensing User Enumeration Vulnerability

IBM Common Licensing is a license management solution from International Business Machines IBM. A user enumeration vulnerability exists in IBM Common Licensing version 9.0, which stems from an observable response discrepancy that can be exploited by a local attacker to enumerate usernames...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1329)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-28236 Insecure Variable Substitution in Vela

Vela is a Pipeline Automation CI/CD framework built on Linux container technology written in Golang. Vela pipelines can use variable substitution combined with insensitive fields like parameters, image and entrypoint to inject secrets into a plugin/image and — by using common substitution string...

18 bug fix and enhancement update

An update is available for nodejs-nodemon, module.nodejs, nodejs, module.nodejs-nodemon, module.nodejs-packaging, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2024-1487

creationtimestamp| type| source ---|---|--- 2024-03-11 19:27:20+00:00| seen| https://t.me/ctinow/204975 2025-03-28 23:29:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9493...