Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Okio GzipSource denial of service vulnerability [ CVE-2023-3635]

Summary Potential Okio GzipSource denial of service vulnerability CVE-2023-3635 have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-3635...

Johnson Controls exacqVision Server web service

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.6 ATTENTION : Exploitable remotely Vendor : Johnson Controls Inc. Equipment : exacqVision Web Service Vulnerability : Permissive Cross-domain Policy with Untrusted Domains 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

Security Bulletin: A vulnerability in Azure Identity Library for .NET affects IBM Robotic Process Automation and may result in a locally authenticated attacker obtaining sensitive information (CVE-2024-29992)

Summary A vulnerability in Azure Identity Library for .NET affects IBM Robotic Process Automation and may result in a locally authenticated attacker obtaining sensitive information. Azure Identity Library for .NET is used by IBM Robotic Process Automation as part of identity management. This...

Security Bulletin: A vulnerability in Npgsql affects IBM Robotic Process Automation and may result in incorrect back end database access (CVE-2024-32655)

Summary A vulnerability in Npgsql affects IBM Robotic Process Automation and may result in incorrect back end database access. Ngpsql is used by IBM Robotic Process Automation for database access. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.46 security update

Red Hat OpenShift Container Platform release 4.13.46 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

DigiCert Certificate Revocations

Update 9:00 a.m., EDT, July 31, 2024: DigiCert has provided updated information and revocation timelines which can be found by visiting: https://status.digicert.com/link is external CISA encourages customers to contact DigiCert if unable to reissue/rekey certificates by the updated revocation...

AI/LLM Model File Contains Executable Code (Keras HFS5 .h5)

Binary data aimodelkerashfs5containsexecutablecode.nbin...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to buffer overflow due to perl (CVE-2020-12723, CVE-2020-10543, CVE-2020-10878)

Summary Perl is used by IBM Cloud Pak for Data to build various binaries. CVE-2020-12723, CVE-2020-10543, CVE-2020-10878 Vulnerability Details CVEID:CVE-2020-12723 DESCRIPTION: Perl is vulnerable to a denial of service, caused by a buffer overflow in regcomp.c. By using a specially crafted regula...

USN-6853-1: Ruby vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Ruby incorrectly handled the ungetbyte and ungetc methods. A remote attacker could use this issue to cause Ruby to crash, resulting in a denial of service, or possibly obtain...

Driver Disk for Microsemi smartpqi 2.1.30_031 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 Cumulative Update 1 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- smartpqi| SAS/Storage Controller| 2.1.30031...

Medium: cups

Issue Overview: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary...

Important: python-werkzeug

Issue Overview: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain...

The vulnerability of the XWiki platform, which is related to the failure to implement measures to neutralize instructions in dynamically executed code, allows a perpetrator to execute arbitrary code.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize instructions within the dynamically executed code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to Websphere Liberty DoS

Summary IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. IBM Sterling Partner Engagement Manager 6.2.3.1 has included an upgraded version of WebSphere Liberty, which remediates this...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to Improper Error Handling.

Summary IBM Sterling Partner Engagement Manager resolved the issue improper error handling, which prevents the disclosure of log messages containing implementation details. Vulnerability Details CVEID:CVE-2022-35640 DESCRIPTION: IBM Sterling Partner Engagement Manager could allow a local attacker...

Netscaler CVE & Security Guide

Introduction Begin with an introduction to the main issue topic, explaining its significance and how the hub article serves as a central resource for related information. Overview of the Issue Provide a brief yet comprehensive overview of the issue, outlining the common challenges and key points...

How to Disable Specific Client Drive Mappings

This article provides instructions on how to disable specific Client Drive Mappings from enumerating within an ICA session...

How to Backup the XenMobile Database

This article describes how to back up the XenMobile database...

How to Mount and Unmount a vDisk Version from the Command Line Interface

This article describes how to mount or unmount a vDisk version from the Command Line Interface. Background CVhdMount utility is used to mount and unmount a vDisk version...

PT-2024-30699 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, where the function adjust jmp off incorrectly used the insn-imm field for all overflow checks. This is incorrect because it should only be done for...