EUVD-2022-44021

Malicious code in bioql PyPI...

EUVD-2022-44016

Malicious code in bioql PyPI...

EUVD-2022-44020

Malicious code in bioql PyPI...

EUVD-2023-44934

Malicious code in bioql PyPI...

EUVD-2022-27588

Malicious code in bioql PyPI...

EUVD-2023-42088

Malicious code in bioql PyPI...

EUVD-2022-39472

Malicious code in bioql PyPI...

EUVD-2024-54334

Malicious code in bioql PyPI...

IBM InfoSphere 11.7.0.x < 11.7.1.6 SP1 Command Injection (7246170)

The version of IBM InfoSphere Information Server installed on the remote host is 11.7.0 prior to 11.7.1.6 SP1. It is, therefore, affected by a command injection vulnerability, as referenced in the 7246170 advisory. - IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to execution of arbitrary commands (CVE-2025-36245)

Summary A vulnerability that allows execution of arbitrary commands was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID:CVE-2025-36245 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticated user to execute arbitrary commands with elevated privilege...

Vulnerability fixed in IBM InfoSphere

IBM has fixed a vulnerability in InfoSphere Versions 11.7.0.0 to 11.7.1.6 The vulnerability is in how input is validated in affected versions of InfoSphere. Authenticated users can exploit this vulnerability to execute arbitrary commands with elevated privileges. This could lead to unauthorized...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in the Spring framework (CVE-2025-41234)

Summary A vulnerability in the Spring framework that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-41234 DESCRIPTION: Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflect...

CVE-2025-36245

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Commons FileUpload (CVE-2025-48976)

Summary A vulnerability in Apache Commons FileUpload that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in the urllib3 library.

Summary Multiple vulnerabilities in the urllib3 library that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2025-50181 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all...

CVE-2025-36245 IBM InfoSphere Information Server command execution

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

CVE-2025-36245 IBM InfoSphere Information Server command execution

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in the Apache Kafka Client.

Summary Multiple vulnerabilities in the Apache Kafka Client that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2025-27818 DESCRIPTION: A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in the Requests HTTP library (CVE-2024-47081)

Summary A vulnerability in the Requests HTTP library that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-47081 DESCRIPTION: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache XML Graphics FOP (CVE-2024-28168)

Summary A vulnerability in Apache XML Graphics FOP that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-28168 DESCRIPTION: Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apac...