CVE-2020-4319: Generation of Error Message Containing Sensitive Information

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402...

PT-2020-17999

Name of the Vulnerable Software and Affected Versions IBM MQ versions 8.0 through 9.1 IBM MQ Appliance versions 8.0 through 9.1 IBM MQ for HPE NonStop versions 8.0 through 9.1 Description The issue allows an authenticated user to obtain sensitive information under special circumstances due to a...

PT-2022-26510 · Sangoma +1 · Asterisk +1

Name of the Vulnerable Software and Affected Versions: Sangoma Asterisk versions 16.28 through 19.6 Sangoma Asterisk version certified/18.9-cert2 Description: A use-after-free issue in the res pjsip pubsub.c module may allow a remote authenticated attacker to crash Asterisk, resulting in a denial...

IBM MQ Denial of Service Vulnerability (CNVD-2020-36477)

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. A security vulnerability exists in the pubsub logic in IBM MQ for HPE NonStop versions 8.1.0 and 8.0.4. An...

CVE-2020-4376

IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a denial of service caused by an error within the pubsub logic. IBM X-Force ID: 179081...

CVE-2020-4376: Undefined Security Weakness

IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a denial of service caused by an error within the pubsub logic. IBM X-Force ID: 179081...

PT-2020-18035

Name of the Vulnerable Software and Affected Versions IBM MQ versions 8.0.4 through 8.1.0 IBM MQ Appliance versions 8.0.4 through 8.1.0 IBM MQ for HPE NonStop versions 8.0.4 through 8.1.0 Description The issue is caused by an error within the pubsub logic, allowing an attacker to cause a denial o...

Malicious Package

Overview action-pubsub is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using action-pubsub...

Malicious Package

Overview active-pubsub is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using active-pubsub...

io.cdap.cdap:cdap-event-writer-ext-gcp-pubsub (1.4.0), io.cdap.cdap:cdap-event-writer-extensions (1.4.0) +5 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.11.2)

com.puppycrawl.tools:checkstyle MAVEN version 6.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - io.cdap.cdap:cdap-event-writer-ext-gcp-pubsub 1.4.0 - io.cdap.cdap:cdap-event-writer-extensions...

FreeBSD : slixmpp -- improper access control (526d9642-3ae7-11e9-a669-8c164582fbac)

NVD reports : slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of th...

CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

PYSEC-2019-121

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

UBUNTU-CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

Improper access control

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

PYSEC-2019-51

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

slixmpp -- improper access control

NVD reports: slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the...

IBM WebSphere MQ pubsub denial of service vulnerability

IBM WebSphere MQ is a messaging middleware product from IBM, USA. It provides a reliable and proven messaging backbone for Service Oriented Architecture SOA. pubsub is a publish-subscribe component used in it. A security vulnerability exists in pubsub in IBM WebSphere MQ versions 8.0 through...