59802 matches found
CVE-2025-33013
CVE-2025-33013 affects IBM MQ Operator and related container images. The issue is information disclosure caused by improper clearing of heap memory before release, exploitable by a local user. Affected versions include IBM MQ Operator LTS 2.0.0–2.0.29, MQ Operator CD 3.0.0–3.0.1, 3.1.0–3.1.3, 3.3...
CVE-2025-33013 IBM MQ Operator information disclosure
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release...
CVE-2025-33013 IBM MQ Operator information disclosure
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release...
CVE-2025-36005 IBM MQ Operator information disclosure
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Internet Pass-Thru could allow a malicious user to obtain sensitive information from another TLS session connection by the...
CVE-2025-36005
CVE-2025-36005 affects IBM MQ Operator families (LTS 2.0.x, CD 3.x, SC2 3.2.x) and IBM MQ Container images. Root cause: improper certificate validation enabling an Internet Pass-Thru proxy to access data from another TLS session when connecting to the same hostname/port. Impact: potential informa...
CVE-2025-36005 IBM MQ Operator information disclosure
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Internet Pass-Thru could allow a malicious user to obtain sensitive information from another TLS session connection by the...
PT-2025-30673 · Ibm · Ibm Mq Operator
Name of the Vulnerable Software and Affected Versions: IBM MQ Operator versions 2.0.0 through 2.0.29 IBM MQ Operator versions 3.0.0 through 3.1.3 IBM MQ Operator versions 3.2.0 through 3.2.13 IBM MQ Operator versions 3.3.0 IBM MQ Operator versions 3.4.0 through 3.4.1 IBM MQ Operator versions 3.5....
IBM多款产品 信任管理问题漏洞
IBM MQ and others are products of International Business Machines IBM.IBM MQ is a messaging middleware product.IBM MQ Operator is a tool for managing the lifecycle of IBM MQ Queue Manager.IBM MQ Container CD is a containerized deployment solution for IBM MQ. A trust management issue vulnerability...
IBM多款产品 安全漏洞
IBM MQ Operator and others are a tool from International Business Machines IBM used to manage the lifecycle of the IBM MQ Queue Manager. A security vulnerability exists in various IBM products that stems from heap memory not being properly cleared before being freed, which could lead to the...
PT-2025-30675 · Ibm · Ibm Mq Operator +1
Name of the Vulnerable Software and Affected Versions: IBM MQ Operator versions 2.0.0 through 2.0.29 IBM MQ Operator CD versions 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0 IBM MQ Operator SC2 versions 3.2.0 through 3.2.13 Description: Improper certificate validati...
CVE-2025-54314 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator...
GHSA-MQCP-P2HV-VW6X vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator...
CVE-2025-54314 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.2-rails...
GHSA-MQCP-P2HV-VW6X vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.2-rails...
LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Operator Surname
Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting XSS via Operator Surname Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software Link:...
SQLite Operator-Based SQL Injection Vulnerability in LangGraph
This report is not public...
live helper chat 安全漏洞
live helper chat is an open source plugin from an individual developer that supports online chat. It provides chat functionality for web platforms. A security vulnerability exists in live helper chat version v4.60, which stems from insufficient validation of the operator name parameter input in t...
📄 LiveHelperChat 4.6.1 Cross Site Scripting
LiveHelperChat versions 4.61 and below suffer from multiple persistent cross site scripting vulnerabilities. Exploit Title: LiveHelperChat Live Help Configuration Telegram Bot. 3. In the Bot Username field, enter the following payload: " 4. Save the settings. 5. Revisit the Telegram configuration...
The vulnerability of the enable-cuda-compat function in software for creating and running NVIDIA Container Toolkit containers and NVIDIA GPU Operator resource management software allows a malicious actor to execute arbitrary code, gain elevated privileges, unauthorizedly access and modify protected information, or cause service failures.
The vulnerability of the enable-cuda-compat function in software for creating and running NVIDIA Container Toolkit containers, as well as in software for managing NVIDIA GPU resources, is related to the use of an unreliable search path. Exploiting this vulnerability allows a remote attacker to...
