PT-2023-14423 · Softing · Uatoolkit Embedded

Name of the Vulnerable Software and Affected Versions: Softing uaToolkit Embedded versions prior to 1.40.1 Description: A malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application. Recommendations: For version...

CVE-2022-44018

CVE-2022-44018 affects Softing uaToolkit Embedded prior to 1.40.1. A malformed PubSub discovery announcement message can trigger a NULL pointer dereference or out-of-bounds memory access in the subscriber application, potentially causing a crash or instability. Affected component is the PubSub di...

DEBIAN-CVE-2022-42705

A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

UBUNTU-CVE-2022-42705

A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

MAL-2022-1391 Malicious code in azure-web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75f389760a7d878693671186ab62e973c2092862d31ba75a2868b1ed1de45dcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1392 Malicious code in azure-web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 766daa3f07414b1bad6a9340c3da5588cf93101c538a644c3ed06da3c3b978d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 766daa3f07414b1bad6a9340c3da5588cf93101c538a644c3ed06da3c3b978d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75f389760a7d878693671186ab62e973c2092862d31ba75a2868b1ed1de45dcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a6924666cc2bdffe8b8ff6df8368455e16d1d15b041b35df6f79a32c85cb36f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4cd4429db38d0aa96596eaac3f98571babd0b4832bd1654628befa40955680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7073 Malicious code in web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a6924666cc2bdffe8b8ff6df8368455e16d1d15b041b35df6f79a32c85cb36f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7074 Malicious code in web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4cd4429db38d0aa96596eaac3f98571babd0b4832bd1654628befa40955680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1393 Malicious code in azure-web-pubsub-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e956d8d7e58a68e8b36a47cb96133ffbe7e21026ee064193b1bb18ddb9e5c2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-web-pubsub-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e956d8d7e58a68e8b36a47cb96133ffbe7e21026ee064193b1bb18ddb9e5c2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-gcloud-pubsub-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40eb63d0a4ed52650bf16d9a4d3a4cc2a9e305ba71dadfa7f7276be2f36ab743 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-4G62-MFWX-4Q48 slixmpp Incorrect Access Control

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

Information Disclosure

IBM MQ is vulnerable to information disclosure. The vulnerability exists due to a data leak from an error message within the pre-v7 pubsub logic...

Security Bulletin: IBM MQ could leak sensitive information due to an error within the pre-v7 queue manager pubsub logic (CVE-2020-4319)

Summary IBM MQ could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error within the pre-v7 queue manager pubsub logic Vulnerability Details CVEID: CVE-2020-4319 DESCRIPTION: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop...

Security Bulletin: IBM MQ could allow an attacker to cause a denial of service caused by an error within the pubsub logic. (CVE-2020-4376)

Summary An error within the pubsub logic could allow an attacker to execute a denial of service attack. Vulnerability Details CVEID: CVE-2020-4376 DESCRIPTION: IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a denial of service caused by an error...

CVE-2020-4319

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402...