997 matches found
Preparing for the Multicloud Future
Take advantage of multicloud flexibility to reduce risk, match spend to your current needs, and increase the pace of innovation...
CVE-2019-4711
CVE-2019-4711 is detailed in IBM’s Security Bulletin for IBM Business Automation Workflow (BAW) 19.0.0.2 with fix JR61324. The issue is an unvalidated TLS certificate import during the registration process to the Resource Registry, allowing a man‑in‑the‑middle attacker to add a signer certificate...
CVE-2019-4469
IBM InfoSphere Information Server is confirmed vulnerable to a reflected cross-site scripting (CVE-2019-4469) in the Web UI. Affected products/versions include IBM InfoSphere Information Server (11.3, 11.5, 11.7) and InfoSphere Server on Cloud (11.5, 11.7). The vulnerability allows an attacker to...
K68401558: BIG-IP virtual server TCP sequence numbers vulnerability
Security Advisory Description Attackers in a privileged network position may be able to obtain TCP sequence numbers SEQ from the BIG-IP system for a short period of time up to 4 seconds that will be reused in future connections with the same source and destination port and IP numbers. Impact...
CVE-2018-1590
IBM Multi-Cloud Data Encryption (MDE) is affected by CVE-2018-1590: it does not invalidate session tokens in a timely manner, potentially allowing attackers with local access to log into a closed browser session. Affected versions: MDE 2.1–2.1.0.1. Remediation: upgrade to MDE 2.1.0.2 (Multi-Cloud...
CVE-2017-1579
CVE-2017-1579 is addressed in IBM DOORS Next Generation (DNG/RRC). The IBM Security Bulletin reports a cross-site scripting vulnerability in the Web UI of Rational DOORS Next Generation, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted sessi...
SUSE CVE-2009-1377
The dtls1bufferrecord function in ssl/d1pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service memory consumption via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."...
SUSE CVE-2022-24951
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future...
SUSE CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...
SUSE CVE-2022-45061
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...
Addressing cybersecurity at the board level with Difenda and Microsoft
This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Cybersecurity is no longer simply a lone silo or regulatory process; it is a business issue that affects every aspect of an organization. From financial losses to reputational damage...
CVE-2021-0890
CVE-2021-0890 is listed in the Android 12 security release notes under the System category with Type: ID (information disclosure) and Severity: Moderate, corresponding to Android bug ID A-190757775. The Connected document provides the vulnerability’s categorization and severity but does not inclu...
CVE-2021-0773
CVE-2021-0773 is listed in Android 12 release notes under Library and Media Framework with type ID and Moderate severity. The Android bulletin entry provides no public technical details (root cause, affected component, impact, or fix) within the connected document. No exploitation information is ...
CVE-2021-0750
CVE-2021-0750 is listed in the Android 12 security release notes under the Framework category with Type: EoP (Elevation of Privilege) and Severity: High. The connected document confirms affected area as Android’s Framework components, but it does not provide specific technical details, affected s...
CVE-2021-0720
CVE-2021-0720 is present in the Android 12 security release notes under the Library component with type ID and a Moderate severity. The connected document confirms it as a listed vulnerability entry (CVE-2021-0720 | A-191303307 | ID | Moderate). No exploit details, affected product versions, root...
Upgraded Q -> 2 from #308 [1676219092947]
Judge has assessed an item in Issue 308 as 2 risk. The relevant finding follows: 03 Upgradeable contract is missing a gap50 storage variable to allow for new storage variables in later versions --- The text was updated successfully, but these errors were encountered: All reactions...
CVE-2022-43926
CVE-2022-43926 affects IBM Power Hardware Management Console (HMC) environments where Mozilla Firefox ESR is used to manage the console. The IBM bulletin states that a user with physical access to the Power HMC could elevate privileges to root on the underlying HMC Linux system without HMC creden...
Learn what an AI-driven future means for cybersecurity at Microsoft Secure
Maintaining security across today’s vast digital ecosystem is a team effort. AI and machine learning have helped to detect threats quickly and respond effectively. Yet we all know that the best defense still requires human wisdom and experience. From a frontline security operations admin to the...
