Security Bulletin: Multiple Vulnerabilities in IBM Event Processing

Summary IBM Event Processing was affected by multiple vulnerabilities. These are affecting the operator and frontend components. Vulnerability Details CVEID:CVE-2024-55565 DESCRIPTION: nanoid aka Nano ID before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version. CWE:CWE-835: Loop...

Security Bulletin: Security vulnerability affect IBM Business Automation Workflow - CVE-2024-7254

Summary IBM Business Automation Workflow traditional includes optional components running on WebSphere Liberty: User Management Service and Process Federation Service. IBM Business Automation Workflow on Containers builds upon WebSphere Liberty, too. A security vulnerability has been reported for...

CVE-2025-27423 Improper Input Validation in Vim

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...

CVE-2024-53029 Improper Input Validation in Automotive OS Platform

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine...

CVE-2024-53022 Improper Input Validation in Automotive OS Platform

Memory corruption may occur during communication between primary and guest VM...

CVE-2024-53012 Improper Input Validation in Automotive OS Platform

Memory corruption may occur due to improper input validation in clock device...

MediaTek Chipsets 缓冲区错误漏洞

MediaTek Chipsets is a series of chips from China's MediaTek MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation and could lead to remote elevation of privilege...

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

CVE-2025-25635

The CVE-2025-25635 entry concerns TOTOlink A3002R firmware version V1.1.1-B20200824.0128, where the vulnerability is a buffer overflow caused by improper validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa. Affected component: the device firmware (TOTOLINK A3002R). I...

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Spring Framework [CVE-2024-38809]

Summary IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Spring Framework, caused by improper input validation CVE-2024-38809. Spring Framework is used by our Speech Microservices. This vulnerabilitiy has been addressed. Please read the details for remediation below...

CVE-2024-36047

Infoblox NIOS CVE-2024-36047 affects versions 8.6.4 and 9.x up to 9.0.3 due to Improper Input Validation. Connected sources indicate a potential privilege escalation to root on the appliance, with CVSS v3.1 base score 9.8 (CRITICAL) impacting confidentiality, integrity, and availability. Remediat...

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

UBUNTU-CVE-2025-0514

Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before 24.8.5...

CVE-2025-0514 Executable hyperlink Windows path targets executed unconditionally on activation

Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before 24.8.5...