Security Bulletin: A security vulnerability has been identified in WebSphere Application Server traditional shipped with IBM Intelligent Operations Center(CVE-2023-27554)

Summary IBM WebSphere Application Server traditional is shipped with IBM Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in...

MAL-2023-708 Malicious code in pruebalol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cf513acc5df2380e286ca7e3d2c858c9c876dd21e8cd65607881d2c3072f75e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-642 Malicious code in npm-webcomponent-murphysms1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0b45d45606aecca3af110b2638a8f962450a6fae54797e117c100285423dbaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pruebalol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd33e19a8d7f91573d342ed9810411e553657b41394227fd9e33600c45e8f11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-682 Malicious code in pitito (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c402c7c9c4bff455910dd1b71d4c8d9cb7e47b0daa68d4d68eedf1649965afb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2023-27554)

Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

MAL-2023-942 Malicious code in vpro-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7799537e27ebbb40c248b3be22aca53aaf7d03bb8caacec55ff74194ee411a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-203 Malicious code in compute-starter-kit-assemblyscript-default (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d22fdf2ac6654a503fea802f494a8beb6fecb1b7b953919da1d01cd04e133958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-77 Malicious code in actblue-contributions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5c0c6e92bdaf9e2ee8c02ef7116bf05898e212a64ff12c21e8990a350ee768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-41221

The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. Authenticated users of the OpenText Archive Center Administration client Versions 16.2.3, 21.2, and older versions could upload XML files to the application that it did not sufficiently validate. As a result,...

CVE-2022-41221

The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. Authenticated users of the OpenText Archive Center Administration client Versions 16.2.3, 21.2, and older versions could upload XML files to the application that it did not sufficiently validate. As a result,...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2023-27554)

Summary IBM WebSphere Application Server WAS is used by the IBM Rational ClearQuest server and web components. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

PT-2023-13967 · Opentext · Opentext Archive Center Administration

Name of the Vulnerable Software and Affected Versions: OpenText Archive Center Administration versions prior to 21.3 Description: The issue allows XXE attacks, where authenticated users could upload XML files that are not sufficiently validated, potentially leading to data exfiltration or localiz...

MAL-2023-809 Malicious code in standforusz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38e449c44fbf714a06802408135b28a615f92b1821aa601f9fa6e14f60f8f832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the XML_ExternalEntityParserCreate function in the XML syntax analyzer library libexpat allows a attacker to cause a service failure.

The vulnerability of the XMLExternalEntityParserCreate function in the XML syntax analyzer library libexpat is related to the possibility of being exploited after release. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GLSA-202305-28 : snakeyaml: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-28 snakeyaml: Multiple Vulnerabilities - The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564. CVE-2017-18640 - Using snakeYAML to parse untrusted YAML...

Cisco Identity Services Engine XML External Entity Injection Vulnerability (CNVD-2023-40183)

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An XML external entity injection vulnerability...

Cisco Identity Services Engine XML External Entity Injection Vulnerability

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An XML external entity injection vulnerability...

CVE-2023-2806

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

CVE-2023-2806

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...