18554 matches found
Fedora: Security Advisory (FEDORA-2023-b6612f3819)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-42006
IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information caused by improper authority checks. IBM X-Force ID: 265266...
CVE-2023-42006
IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information caused by improper authority checks. IBM X-Force ID: 265266...
Design/Logic Flaw
IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information caused by improper authority checks. IBM X-Force ID: 265266...
CVE-2023-42006
CVE-2023-42006 affects IBM Administration Runtime Expert for i (versions 7.2–7.5). The root cause is improper authority checks that could allow a local user to obtain sensitive information stored in files (e.g., passwords). The IBM bulletin lists affected releases 7.2–7.5 and provides a remediati...
MAL-2023-8649 Malicious code in npm_package_dependencies__babel_runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...
Malicious code in npm_package_dependencies__babel_runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...
[SECURITY] Fedora 39 Update: java-17-openjdk-17.0.9.0.9-1.fc39
The OpenJDK 17 runtime environment...
Security Bulletin: IBM Administration Runtime Expert for i is vulnerable to an attacker obtaining sensitive information due to CVE-2023-42006
Summary IBM Administration Runtime Expert for i could allow sensitive information stored in a file, including passwords, to be obtained by an attacker as described in the vulnerability details section. IBM Administration Runtime Expert for i has addressed the vulnerability with a fix as described...
Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affects IBM® Db2® (CVE-2022-40609)
Summary There was a vulnerability in IBM® Runtime Environment Java™ Version 7.1.5.18 and earlier, 8.0.8.4 and earlier used by IBM® Db2®. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM® Db2®. (Apr 2023 CPU)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7.1.5.17 and earlier, 8.0.8.4 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in April 2023. Vulnerability Details CVEID: CVE-2023-21930 DESCRIPTION: An unspecified...
Security Bulletin: Multiple vulnerabilities affect IBM® Semeru Runtime
Summary This bulletin covers all applicable Java SE CVEs published by OpenJDK as part of their October 2023 Vulnerability Advisory, plus CVE-2023-4807 and CVE-2023-5676. For more information please refer to OpenJDK's October 2023 Vulnerability Advisory and the X-Force database entries referenced...
dotnet6.0 security update
An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...
dotnet7.0 security update
An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...
Important Photon OS Security Update - PHSA-2023-5.0-91-0158
Updates of 'linux', 'linux-esx', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to a remote attacker causing integrity impacts due to the libraries component (CVE-2023-22049).
Summary IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i are vulnerable to a remote attacker causing a low integrity impact due to an unspecified vulnerability in the libraries component as described in the vulnerability details section. The vulnerability is fixe...
K000137702: Apache vulnerability CVE-2022-25147
Security Advisory Description Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions. CVE-2022-25147...
dotnet7.0 security update
7.0.114-1.0.1 - Update to .NET SDK 7.0.114 and Runtime 7.0.14...
Fedora 37 : golang (2023-7e185b8c12)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7e185b8c12 advisory. Includes security fixes to the path/filepath package, as well as bug fixes to the linker, the runtime, the compiler, and the go/types, net/http, and...