Lucene search
+L

346 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2026/11/02 3:16 p.m.•4 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Bouncy Castle for Java

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Bouncy Castle for Java. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-97873 DESCRIPTION: In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy...

8.2CVSS7.5AI score0.00418EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/26 5:00 p.m.•13 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion

Summary SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-102276 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and...

7.5CVSS6.4AI score0.00491EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/23 3:32 p.m.•13 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Spring

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Spring. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2016-5007 DESCRIPTION: Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x,...

7.5CVSS6.5AI score0.30338EPSS
SaveExploits4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/23 1:59 p.m.•12 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by a Jackson-databind access control bypass vulnerability

Summary SPSS Collaboration and Deployment Services is affected by a Jackson-databind access control bypass vulnerability. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-59889 DESCRIPTION: jackson-databind contains the general-purpose data-binding...

6.5CVSS5.9AI score0.00346EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/21 3:51 p.m.•12 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Jackson Core

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Jackson Core. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-89425 DESCRIPTION: UTF8DataInputJsonParser.reportInvalidToken in FasterXML jackson-core builds the...

7.5CVSS7.2AI score0.00628EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/21 3:18 p.m.•15 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-105800 DESCRIPTION: i18next-http-backend is a backend layer for i18next...

7CVSS7.7AI score0.00488EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/16 5:59 p.m.•22 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in Jackson Databind

Summary SPSS Collaboration and Deployment Services is affected by vulnerabilities in Jackson Databind. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-54516 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-mode...

5.3CVSS6.3AI score0.00449EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/14 4:40 p.m.•13 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Jackson Databind

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Jackson Databind. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-83557 DESCRIPTION: DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied...

7.5CVSS6.8AI score0.00717EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/14 4:33 p.m.•17 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by an Apache Ant vulnerability that could allow arbitrary file overwrite via malicious FTP/SCP downloads

Summary SPSS Collaboration and Deployment Services is affected by an Apache Ant vulnerability that could allow arbitrary file overwrite via malicious FTP/SCP downloads. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-78254 DESCRIPTION: The ftp and scp task...

7.4CVSS7AI score0.0052EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/14 12:00 a.m.•16 views

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.1CVSS7.6AI score0.00422EPSS
SaveExploits0References2Affected Software14
NVD
NVD
•added 2026/10/13 7:21 p.m.•13 views

CVE-2026-88174

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

8.1CVSS0.00422EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 7:01 p.m.•11 views

EUVD-2026-100104

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

8.1CVSS7.8AI score0.00422EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:01 p.m.•48 views

CVE-2026-88174

A race condition exists in Windows Deployment Services due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an unauthorized attacker to achieve remote code execution over the network. No specific exploit details or official patch versions ...

8.1CVSS7.8AI score0.00422EPSS
SaveExploits0References1Affected Software7
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•21 views

Windows Deployment Services Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

8.1CVSS7.9AI score0.00422EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•11 views

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS7.7AI score0.00663EPSS
SaveExploits0References2Affected Software14
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•11 views

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS7.7AI score0.00663EPSS
SaveExploits0References2Affected Software14
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112982

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description An improper synchronization issue, known as a race condition, occurs during concurrent execution using a shared resource. This allows an unauthorized attacker to execute...

8.1CVSS8AI score0.00422EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•15 views

Microsoft Windows: CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

8.1CVSS7.9AI score0.00422EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-88174: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

8.1CVSS7.9AI score0.00422EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•15 views

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00333EPSS
SaveExploits0References2Affected Software14
Rows per page
Query Builder