vfxt (>=0.5.2.1, <=0.5.4.3) potentially affected by CVE-2022-30187 via azure-storage-queue (2.0.1)

azure-storage-queue PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - vfxt =0.5.2.1, =0.5.4.3 Source cves: CVE-2022-30187 Source advisory: OSV:GHSA-64X4-9HC6-R2H6...

PT-2022-6212

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 21.2R3 Juniper Networks Junos OS versions prior to 21.3R2-S1, 21.3R3 Juniper Networks Junos OS versions prior to 21.4R1-S2, 21.4R2 Description A Missing Release of Memory after Effective Lifetime...

CVE-2022-35283

IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request...

appdaemon (>=4.0.4, <=4.0.5), aviatrix-discovery (>=0.2.100, <=0.2.148) +34 more potentially affected by CVE-2022-30187 via azure-storage-queue (>=0.37.0, <=12.3.0)

azure-storage-queue PYPI version =0.37.0, =4.0.4, =0.2.100, =0.2.123, =3.0.0, =0.0.38, =1.37.0, =1.37.0, =1.37.0, =1.37.0, =1.37.0, =0.0.1, =1.0.86, =0.0.1, =0.0.1, =0.7.0, =0.7.16 and more Source cves: CVE-2022-30187 Source advisory: MEND:CVE-2022-30187...

PT-2025-25952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a problem in the Linux kernel related to the validation of NIC queues, specifically with queue offset calculation. This calculation must be performed only for NIC...

Fixed vulnerabilities in IBM MQ (Operator and Queue manager)

IBM has fixed multiple vulnerabilities in supporting software provided with IBM MQ Operator and Queue manager. The vulnerabilities are in the Golang software provided. A malicious party could potentially exploit the vulnerabilities to obtain increased user privileges, sensitive data and/or...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to an issue in OPM and Golang Go packages (CVE-2020-15257, CVE-2021-21334 and CVE-2021-41771)

Summary IBM MQ Operator catalog container image is vulnerable to an issue in OPM package from Red Hat openshift4/ose-operator-registry and IBM MQ Operator, IBM Supplied Queue Manager container images are vulnerable to an issue in the Golang Go packages. CVE-2020-15257, CVE-2021-21334 and...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to vulnerabilities from Golang Go and IBM WebSphere Application Server Liberty (CVE-2021-39293 and CVE-2021-39038)

Summary Vulnerabilities were identified in Golang Go and IBM WebSphere Application Server Liberty packages that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. Vulnerability Details CVEID: CVE-2021-39293 DESCRIPTION: Golang Go is vulnerable to a denial of service,...

Security Bulletin: IBM Security Verify Information Queue uses a dom4j version with improper XXE restrictions (CVE-2020-10683)

Summary The products image in IBM Security Verify Information Queue ISIQ v10.0.2 uses an older version of the dom4j library that does not properly safeguard against XML External Entity XXE attacks. ISIQ v10.0.3 has upgraded its products image to include a newer dom4j level that remediates the...

sidekiq: XSS via the queue name of the live-poll feature

A cross-site scripting vulnerability was found in sidekiq via the queue name of the live-poll feature. A potential attacker can impersonate or masquerade as the victim user using this vulnerability when Internet Explorer is used...

CVE-2022-34787

Jenkins Project Inheritance Plugin 21.04.03 and earlier does not escape the reason a build is blocked in tooltips, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control the reason a queue item is blocked...

Cross site scripting

Jenkins Project Inheritance Plugin 21.04.03 and earlier does not escape the reason a build is blocked in tooltips, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control the reason a queue item is blocked...

PT-2022-30938

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the bfq mechanism, which is related to avoiding the merging of queues with different parents. The actual impact and attack plausibility of this issue have not yet been prove...

PT-2025-8602 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition in the Linux kernel's mptcp socket handling can lead to a use-after-free UaF access. This occurs when the listener socket owning a relevant request is closed, freeing...

PT-2022-31281

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns the bfq mechanism, specifically the merging of queues with different parents. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

SUSE: Security Advisory (SUSE-SU-2022:2174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Robotic Process Automation before 21.0.2 and 21.0.1.2 could allow a queue to be deleted by a registered user.

Summary IBM Robotic Process Automation before 21.0.2 and 21.0.1.2 could allow a queue to be deleted by a registered user. This could cause a disruption on any RPA scripts dependent on queues. Vulnerability Details CVEID:CVE-2022-22319 DESCRIPTION: IBM Robotic Process Automation could allow a...

Queued proposals cannot be executed in GovernorBravoDelegate.sol

Lines of code GovernorBravoDelegate.solL63 Vulnerability details Impact In GovernorBravoDelegate.sol's queue function, the executed value for the proposal to be queued is set to true. The execute function in GovernorBravoDelegate.sol will revert when called since the state of the proposal is...

Malware in @boosted-bounty/firebase-queue

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @boosted-bounty/firebase-queue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ca2bdb5a1428f6304b1f11c70817ec28f2d7ee836fd9dfcc1dee58d87d7a37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...