18 matches found
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026
Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the SD-WAN component with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security vulnerabilities. IBM SevOne...
Fedora 43 : pack (2026-e6e0368149)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6e0368149 advisory. Security update to pack 0.40.8 Fixes CVE-2024-25621: containerd - local privilege escalation Fixes CVE-2025-47913: golang.org/x/crypto/ssh/agent - S...
Fedora 44 : pack (2026-8729dce4b8)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8729dce4b8 advisory. Security update to pack 0.40.8 Fixes CVE-2024-25621: containerd - local privilege escalation Fixes CVE-2025-47913: golang.org/x/crypto/ssh/agent - S...
Description of the security update for SharePoint Server 2019 Language Pack: March 10, 2026 (KB5002847)
None None...
Security Bulletin: IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907)
Summary IBM WebSphere Application Server is vulnerable to server-side request forgery. Vulnerability Details CVEID:CVE-2025-27907 DESCRIPTION: IBM WebSphere Application Server is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests...
CVE-2024-25982 Msa-24-0005: csrf risk in language import utility
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...
Fedora: Security Advisory for pack (FEDORA-2023-257f33c602)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM Data Replication Java SDK Update
Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when the virtual machine or JNI natives are converting from...
HPESBHF04091 rev.1 - HPE Intel 700-DA series Ethernet Controllers, Local Multiple Vulnerabilities
Potential Security Impact: Local: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port FLR-SFP+ X710-DA2 Adapter -Prior to Version 10.54.7 HPE Ethernet 10Gb 2-port SFP+ X710-DA2 Adapter -Prior to Version 10.54.7 Intel X710-DA2 Ethernet...
Security Bulletin: IBM® DB2® LUW contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally. (CVE-2014-6097)
Summary IBM DB2 LUW contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally. This could result in a DB2 server crash and require that the server be restarted Vulnerability Details CVE ID: CVE-2014-6097 DESCRIPTION: IBM DB2 V9.7 and V9.8 contain ...
VirtualBox Privilege Escalation
Privilege Escalation in VirtualBox CVE-2017-3316 == Overview === System affected: VirtualBox Software-Version: prior to 5.0.32, prior to 5.1.14 User-Interaction: Required Impact: A Man-In-The-Middle could infiltrate an Extension-Pack-Update to gain a root-shell === Detailed description === In my...
Oracle VM VirtualBox < 5.0.32 / < 5.1.14 - Local Privilege Escalation
== Overview === System affected: VirtualBox Software-Version: prior to 5.0.32, prior to 5.1.14 User-Interaction: Required Impact: A Man-In-The-Middle could infiltrate an Extension-Pack-Update to gain a root-shell === Detailed description === In my research about update mechanism of open-source...
CVE-2015-4640: Undefined Security Weakness
The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...
Forefront Identity Manager 2010 Service and Portal Language Pack Update (KB978864)
Forefront Identity Manager 2010 Service and Portal Language Pack Update KB978864...
VS 2005 - TFC - ENU.SP0
...
Security Update for Microsoft SharePoint Server 2019 Language Pack (KB5002664) farm-deployment
A security vulnerability exists in Microsoft SharePoint Server 2019 Language Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft SharePoint Server Subscription Edition Language Pack (KB5002270) farm-deployment
A security vulnerability exists in Microsoft SharePoint Server Subscription Edition Language Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...