11292 matches found
The vulnerability of the Microsoft Host Integration Server gateway application, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Host Integration Server client application is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
IBM InfoSphere Information Server Elevation of Privilege Vulnerability (CNVD-2023-91221)
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An elevation of privilege vulnerability exists in IBM InfoSphere Information Server version 11.7...
Product Walkthrough: Silverfort's Unified Identity Protection Platform
In this article, we will provide a brief overview of Silverfort's platform, the first and currently only unified identity protection platform on the market. Silverfort's patented technology aims to protect organizations from identity-based attacks by integrating with existing identity and access...
GHSA-RCJC-C4PJ-XXRP vulnerabilities
Vulnerabilities for packages: spark, logstash-integration-jdbc, druid...
CVE-2022-46337 vulnerabilities
Vulnerabilities for packages: spark, logstash-integration-jdbc, druid...
CVE-2022-46337 vulnerabilities
Vulnerabilities for packages: druid, spark, spark-fips, hadoop-fips, logstash-integration-jdbc...
grafana security and enhancement update
9.2.10-7 - resolve RHEL-12649 - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - testing is turned off due to test failures caused by testing date mismatch 9.2.10-6 - Add /usr/share/grafana to systemd-sysusers --replace 9.2.10-5 - resolve CVE-2023-3128 grafana:...
Security Bulletin: IBM Integration Bus is vulnerable to a denial of service due to Eclipse Jetty. (CVE-2023-36478)
Summary IBM Integration Bus runtime and toolkit are vulnerable to a denial of service due to Eclipse Jetty. CVE-2023-36478 Vulnerability Details CVEID: CVE-2023-36478 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by an integer overflow and buffer allocation in...
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a denial of service due to Eclipse Mosquitto.
Summary The built-in MQTT pub/sub broker in IBM App Connect Enterprise and IBM Integration Bus is vulnerable to a denial of service due to Eclipse Mosquitto. CVE-2023-5632 Vulnerability Details CVEID: CVE-2023-5632 DESCRIPTION: Eclipse Mosquitto is vulnerable to a denial of service, caused by a...
CVE-2023-38151
Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability...
CVE-2023-38151
Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability...
Remote code execution
Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability...
CVE-2023-38151 Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability
...
CVE-2023-38151
CVE-2023-38151 affects Microsoft Host Integration Server 2020 (and associated components such as the OLE DB Provider for DB2 V7). The root cause cited in PT-2023-7053 is insufficient input validation, enabling remote code execution. Impact per sources: remote code execution with network access, r...
CVE-2023-38151 Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability
...
CI/CD Risks: Protecting Your Software Development Pipelines
Have you heard about Dependabot? If not, just ask any developer around you, and they'll likely rave about how it has revolutionized the tedious task of checking and updating outdated dependencies in software projects. Dependabot not only takes care of the checks for you, but also provides...
Security Bulletin: IBM Integration Bus is vulnerable to multiple CVEs due to Apache Tomcat.
Summary Due to Apache Tomcat, IBM Integration Bus is vulnerable to multiple CVEs. CVE-2023-45648, CVE-2023-42794, CVE-2023-44487, CVE-2023-42795. Vulnerability Details CVEID: CVE-2023-45648 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of HTTP...
Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability
...
Microsoft guidance regarding credentials leaked to GitHub Actions Logs through Azure CLI
Summary The Microsoft Security Response Center MSRC was made aware of a vulnerability where Azure Command-Line Interface CLI could expose sensitive information, including credentials, through GitHub Actions logs. The researcher, from Palo Alto Networks Prisma Cloud, found that Azure CLI commands...
