Security Bulletin: WebSphere Application Server bundled with IBM Tivoli Composite Application Manager for Application Diagnostics is affected by a remote attacker to bypass security restrictions

Summary WebSphere Application Server is included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. CVE-2024-56339 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server could provide weaker than expected security (CVE-2025-33142)

Summary The security issue described in CVE-2025-33142 has been identified in the WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

CVE-2025-8862

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version where this information is properly redacted...

CVE-2025-8862

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version where this information is properly redacted...

CVE-2025-8862

CVE-2025-8862 involves YugabyteDB collecting diagnostics from servers, which may include sensitive gflag configurations. The underlying issue is that this information is not properly redacted in some versions, leading to potential exposure. The connected documents consistently state the mitigatio...

CVE-2025-8862

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version where this information is properly redacted...

CVE-2025-8862

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version where this information is properly redacted...

PT-2025-32542 · Yugabyte · Yugabytedb

Name of the Vulnerable Software and Affected Versions: YugabyteDB affected versions not specified Description: YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. Recommendations: Upgrade the database to a version where...

CVE-2025-7674

Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service DoS due to negatively impacting the server's performance. This vulnerability has no impact on data confidentiality or integrity. This...

Linux Distros Unpatched Vulnerability : CVE-2024-26781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix possible deadlock in subflow diag Syzbot and Eric reported a lockdep splat in the...

CVE-2025-7674

Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service DoS due to negatively impacting the server's performance. This vulnerability has no impact on data confidentiality or integrity. This...

CVE-2025-7674

CVE-2025-7674 : Improper input validation in Roche Diagnostics navify Monitoring (pre-1.08.00) can be manipulated via input data to cause a DoS by degrading server performance. Impact on confidentiality/integrity is not indicated. Affected versions: before 1.08.00. Remediation: upgrade to 1.08.00...

CVE-2025-7674 navify Monitoring API input validation

Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service DoS due to negatively impacting the server's performance. This vulnerability has no impact on data confidentiality or integrity. This...

CVE-2025-7674 navify Monitoring API input validation

Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service DoS due to negatively impacting the server's performance. This vulnerability has no impact on data confidentiality or integrity. This...

PT-2025-31944 · Roche Diagnostics · Navify Monitoring

Name of the Vulnerable Software and Affected Versions: Roche Diagnostics navify Monitoring versions prior to 1.08.00 Description: An improper input validation issue exists in Roche Diagnostics navify Monitoring. An attacker can manipulate input data, potentially leading to a denial of service DoS...

Roche Diagnostics navify Monitoring 安全漏洞

Roche Diagnostics navify Monitoring is a real-time laboratory monitoring and alerting software from Roche Diagnostics, USA. A security vulnerability exists in Roche Diagnostics navify Monitoring versions prior to 1.08.00 that stems from improper input validation and could lead to a denial of...

Malicious code in acme-diagnostics (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6396 Malicious code in acme-diagnostics (npm)

--- -= Per source details. Do not edit below this line.=-...

Xorcom CompletePBX Arbitrary File Read and Deletion via systemDataFileName

This module exploits an authenticated path traversal vulnerability in Xorcom CompletePBX use auxiliary/scanner/http/xorcomcompletepbxdiagnosticsfileread msf auxiliaryxorcomcompletepbxdiagnosticsfileread show actions ...actions... msf auxiliaryxorcomcompletepbxdiagnosticsfileread set ACTION msf...

CVE-2025-46122

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API endpoint /admin/cmdstat.jsp passes attacker-controlled input to the shell without adequate validation, enabling a remote attacker to specify a target by MAC...