Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in axios

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of axios Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024 Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability allows...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in gRPC

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of gRPC Vulnerability Details CVEID:CVE-2024-7246 DESCRIPTION: Google gRPC is vulnerable to a denial of service, caused by HPACK table poisoning between the proxy and the backend. By sending a specially crafted...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Commons

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Apache Commons Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessive...

CVE-2024-58073

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check dpuplaneatomicprintstate for valid sspp Similar to the rpipe sspp protect, add a check to protect the pipe state prints to avoid NULL ptr dereference for cases when the state is dumped without a corresponding...

CVE-2025-1696

creationtimestamp| type| source ---|---|--- 2025-03-06 12:33:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6667 2025-03-06 15:30:39+00:00| seen| https://t.me/cvedetector/19697 2025-08-18 13:31:23+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:43+00:00| seen|...

CVE-2025-27513

creationtimestamp| type| source ---|---|--- 2025-03-05 18:55:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6584 2025-03-05 22:47:43+00:00| seen| https://t.me/cvedetector/19654 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19...

WordPress bbPress plugin <= 2.6.11 - Cross-Site Request Forgery to Limited Privilege Escalation vulnerability

Cross-Site Request Forgery to Limited Privilege Escalation vulnerability discovered by Brian Mungai in WordPress Plugin bbPress versions = 2.6.11...

CVE-2025-1425

creationtimestamp| type| source ---|---|--- 2025-03-04 15:31:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6372 2025-03-04 18:21:16+00:00| seen| https://t.me/cvedetector/19518 2025-08-18 18:31:00+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...

CVE-2025-0360

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API...

WordPress Ninja Pages plugin <= 1.4.2 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Manas Talekar in WordPress Plugin Ninja Pages versions = 1.4.2...

Linux Distros Unpatched Vulnerability : CVE-2015-2922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6...

GHSA-GH9Q-2XRM-X6QV CGI has Denial of Service (DoS) potential in Cookie.parse

There is a possibility for DoS by in the cgi gem. This vulnerability has been assigned the CVE identifier CVE-2025-27219. We recommend upgrading the cgi gem. Details CGI::Cookie.parse took super-linear time to parse a cookie string in some cases. Feeding a maliciously crafted cookie string into t...

Information Exposure

Overview Flask-AppBuilder is a simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Affected versions of this package are vulnerable to Information Exposure due to observable...

CVE-2025-1859

creationtimestamp| type| source ---|---|--- 2025-03-03 09:35:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6162 2025-03-03 11:21:29+00:00| seen| https://t.me/cvedetector/19315...

CVE-2025-1840

creationtimestamp| type| source ---|---|--- 2025-03-03 00:29:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6118 2025-03-03 01:30:33+00:00| published-proof-of-concept| Telegram/pstnQ8ZZOX-2Yeq-UDXjBXIKQOIrf-BFgYyilC58DHdCcZU 2025-03-03 02:34:12+00:00| seen|...

ASB-A-375408314

In processserviceattrrsp of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Independent Analyst Firm: Qualys Recognized as a Leader in Attack Surface Management

As the modern attack surface continues to grow in complexity, the need for simplified asset discovery and risk assessment has never been more acute. In 2021, Qualys introduced CyberSecurity Asset Management CSAM, a visionary ASM offering designed to bolster the customer’s coverage of the attack...

CVE-2025-1300

creationtimestamp| type| source ---|---|--- 2025-02-28 13:27:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5901 2025-02-28 13:49:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljakcuonjd2y 2025-02-28 15:21:22+00:00| seen| https://t.me/cvedetector/19150...

SUSE CVE-2025-21764

In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndiscallocskb ndiscallocskb can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF...