Lucene search
+L

2970 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2023/10/04 8:07 a.m.•64 views

Security Bulletin: Vulnerability in Apache Commons IO affect IBM Engineering Lifecycle Optimization - Publishing

Summary Apache Commons IO is used by IBM Engineering Lifecycle Optimization - Publishing Vulnerability Details CVEID:CVE-2021-29425 DESCRIPTION: Apache Commons IO could allow a remote attacker to traverse directories on the system, caused by improper input validation by the FileNameUtils.normaliz...

5.8CVSS6.3AI score0.10549EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2023/10/04 8:04 a.m.•43 views

Security Bulletin: A vulnerability in JDOM affects IBM Engineering Lifecycle Optimization - Publishing

Summary A vulnerability in JDOM affects IBM Engineering Lifecycle Optimization - Publishing Vulnerability Details CVEID:CVE-2021-33813 DESCRIPTION: JDOM is vulnerable to a denial of service, caused by an XXE issue in SAXBuilder. By sending a specially-crafted HTTP request, a remote attacker could...

7.5CVSS7.4AI score0.19442EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2023/10/04 7:59 a.m.•46 views

Security Bulletin: Multiple vulnerabilities has been identified in FasterXML jackson-databind affect IBM Engineering Lifecycle Optimization - Publishing

Summary A security vulnerability has been identified in FasterXML jackson-databind affect IBM Engineering Lifecycle Optimization - Publishing. Information about a security vulnerability affecting jackson-databind has been published in a security bulletin. Vulnerability Details CVEID:CVE-2021-4687...

7.5CVSS6.8AI score0.0486EPSS
SaveExploits5Affected Software1
RedhatCVE
RedhatCVE
•added 2023/09/13 1:54 p.m.•58 views

CVE-2022-48566

A constant-time-defeating optimization issue was found in python. This issue occurs when sending a specially crafted request, which could allow an attacker to obtain sensitive information. Mitigation As per upstream, either make the accumulator variable result a volatile unsigned char instead of...

5.9CVSS6.3AI score0.01301EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
•added 2023/09/08 8:48 a.m.•63 views

Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime may affect IBM Decision Optimization for IBM Cloud Pak for Data

Summary There are multiple vulnerabilities in IBM® Semeru Runtime Version 11 used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified...

9.1CVSS9.2AI score0.02495EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2023/09/08 8:46 a.m.•34 views

Security Bulletin: A Vulnerability in python-requests Affects IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2023-32681)

Summary Python-requests is used by IBM Decision Optimization for IBM Cloud Pak for Data. An information disclosure vulnerability in python-requests was addressed. Vulnerability Details CVEID:CVE-2023-32681 DESCRIPTION: python-requests could allow a remote attacker to obtain sensitive information,...

6.1CVSS6.2AI score0.02974EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2023/09/08 8:45 a.m.•58 views

Security Bulletin: Decision Optimization in IBM Cloud Pak for Data is vulnerable to a Certifi vulnerability (CVE-2023-37920)

Summary Decision Optimization in IBM Cloud Pak for Data is vulnerable to a Certifi vulnerability with details below. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2023-37920 DESCRIPTION: An unspecified error with the removal of e-Tugra root certificate in Certifi has an...

9.8CVSS8.3AI score0.00568EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2023/09/08 8:42 a.m.•62 views

Security Bulletin: Decision Optimization in IBM Cloud Pak for Data is affected by a tough-cookie Prototype Pollution vulnerability (CVE-2023-26136)

Summary Decision Optimization in IBM Cloud Pak for Data is vulnerable to a tough-cookie Prototype Pollution vulnerability with details below. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2023-26136 DESCRIPTION: Salesforce tough-cookie could allow a remote attacker to...

9.8CVSS8.3AI score0.02627EPSS
SaveExploits2Affected Software1
Citrix
Citrix
•added 2023/09/07 12:00 a.m.•18 views

How to optimize paging file configuration for PVS targets (Multi-session Server OS)

...

7.2AI score
SaveExploits0
OSV
OSV
•added 2023/09/06 7:53 a.m.•21 views

CLSA-2023-1693986821 python3: Fix of 2 CVEs

CVE-2022-48565: Reject XML entity declarations in plist files - CVE-2022-48566: Remove possible time-affected optimization...

9.8CVSS6.8AI score0.05065EPSS
SaveExploits4References1
OSV
OSV
•added 2023/09/06 7:49 a.m.•15 views

CLSA-2023-1693986539 python3: Fix of 2 CVEs

CVE-2022-48565: Reject XML entity declarations in plist files - CVE-2022-48566: Remove possible time-affected optimization...

9.8CVSS6.8AI score0.05065EPSS
SaveExploits4References1
OSV
OSV
•added 2023/08/24 12:00 a.m.•46 views

PSF-2023-6 hmac.compare_digest() accumulator not constant-time

An issue was discovered in comparedigest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.comparedigest...

5.9CVSS6.8AI score0.01301EPSS
SaveExploits1References2
Citrix
Citrix
•added 2023/08/23 12:00 a.m.•21 views

Can you enable HDX 3D Pro on Server VDA?

Need to enable HDX 3D Pro on Server VDA. Policy setting for 'Optimise for 3D Graphics Workload' is enabled - VeryHighDef Policy Template applied. -https://docs.citrix.com/en-us/citrix-daas/policies/policies-templates.html HDX Graphic Status Indicator on Published Desktops States 'HDX 3D Pro:...

7.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2023/08/22 9:19 a.m.•45 views

Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2022-21282, CVE-2022-21296, CVE-2022-21299)

Summary There are multiple vulnerabilities in IBM® Semeru Runtime Version 8 used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21299 DESCRIPTION: An unspecified...

5.3CVSS6AI score0.03458EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2023/08/11 3:15 a.m.•18 views

CVE-2023-27506

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS6AI score0.0016EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/11 3:15 a.m.•18 views

Buffer overflow

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.8AI score0.0016EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/11 2:37 a.m.•16 views

CVE-2023-27506

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

5.5CVSS7.2AI score0.0016EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/11 2:37 a.m.•83 views

CVE-2023-27506

CVE-2023-27506 affects Intel® Optimization for TensorFlow prior to 2.12. The issue arises from improper buffer restrictions, enabling a locally authenticated attacker to potentially escalate privileges on the system. Intel and multiple advisories reference the same vulnerability, with the primary...

7.8CVSS7.8AI score0.0016EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/11 2:37 a.m.•48 views

CVE-2023-27506

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

5.5CVSS8.1AI score0.0016EPSS
SaveExploits0References1
Mend
Mend
•added 2023/08/11 2:37 a.m.•1 views

CVE-2023-27506

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.0016EPSS
SaveExploits0References6
Rows per page
Query Builder