24550 matches found
Security Bulletin: Multiple Vulnerabilities in IBM Event Streams
Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.8.1. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU...
CVE-2025-53176
creationtimestamp| type| source ---|---|--- 2025-07-07 03:16:31+00:00| seen| Telegram/8Ewnkzw9DIHDkQKcwYzcMmCjvUlTjrtXwgbcYnRxhvR7TM...
CVE-2025-22101
creationtimestamp| type| source ---|---|--- 2025-07-06 10:14:31+00:00| seen| Telegram/JbJAn-VIkbx56JH7ETtmEX-I7LpDXJEXr-C309X-JNeua2I...
CVE-2025-27446
creationtimestamp| type| source ---|---|--- 2025-07-06 08:36:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltbujuthim2q 2025-07-06 09:53:06+00:00| seen| https://seclists.org/oss-sec/2025/q3/7 2025-07-06 12:15:45+00:00| seen|...
GHSA-JPXC-VMJF-9FCJ
creationtimestamp| type| source ---|---|--- 2025-07-05 06:11:30+00:00| seen| Telegram/1dqgidmIHf5IJFAriKd5AT3fDWrzJYXTjqmUtpExJFAzqOc...
CVE-2025-53365
creationtimestamp| type| source ---|---|--- 2025-07-05 01:38:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt6mqf23372i 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2026-03-...
CVE-2025-34091
A padding oracle vulnerability exists in Google Chrome’s AppBound cookie encryption mechanism due to observable decryption failure behavior in Windows Event Logs when handling malformed ciphertext in SYSTEM-DPAPI-encrypted blobs. A local attacker can repeatedly send malformed ciphertexts to the...
UBUNTU-CVE-2025-38183
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix potential out-of-bounds write in lan743xptpioeventclockget Before calling lan743xptpioeventclockget, the 'channel' value is checked against the maximum value of PCI11X1XPTPIOMAXCHANNELS8. This seems correct and...
CVE-2025-47634
creationtimestamp| type| source ---|---|--- 2025-07-04 12:13:56+00:00| seen| Telegram/1Sng3tIrau-ifR-iGzkkR2pmqkVifqvtqE6rHfHfpzrzHEc...
The vulnerability in the `fs/tracefs/event inode.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fs/tracefs/event inode.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Security Bulletin: Multiple Vulnerabilities in IBM Event Processing
Summary Multiple vulnerabilities were addressed in IBM Event Processing version 1.4.1 Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 to compile regular expression...
Security Bulletin: Multiple Vulnerabilities in IBM Event Streams
Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.8.1. Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An...
CVE-2025-34091
Rejected reason: Neither filed by Chrome nor a valid security vulnerability...
CVE-2025-6942
The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine...
Malicious code in taskrouter-event-listener (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6bba47f8505eeeef34953080b36ace84d8fd303c36ee00977a2d00f9447a4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
kernel: Bluetooth: Fix use after free in hci_send_acl
A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hcidisconnphylinkcompleteevt function. Improper cleanup and reference handling can lead to a connection object, hcon, being freed and then later accessed during a subsequent function call. This issue can lead to a...
CVE-2012-6428
creationtimestamp| type| source ---|---|--- 2025-07-01 20:09:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20077...
GHSA-3Q26-F695-PP76
creationtimestamp| type| source ---|---|--- 2025-07-01 18:08:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20067 2025-07-01 19:07:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779544615525397...