Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for Junuary 2025.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.0-IF002 Vulnerability Details CVEID:CVE-2024-47561 DESCRIPTION: Apache Avro could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw in schema parsing in the Java...

Security Bulletin: Multiple vulnerabilities in spring packaged with CMIS affect IBM Business Automation Workflow - CVE-2024-22262, CVE-2024-38809

Summary IBM Business Automation Workflow is vulnerable repackages a FileNet Content Manager's CMIS interface, which in turn repackages parts of a version of the Spring framework. Vulnerabilities have been reported for spring. Vulnerability Details CVEID:CVE-2024-22262 DESCRIPTION: VMware Tanzu...

CVE-2025-25166

creationtimestamp| type| source ---|---|--- 2025-02-07 10:18:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqmb4v22t 2025-02-07 12:08:29+00:00| seen| https://t.me/cvedetector/17470 2025-02-07 12:54:01+00:00| seen|...

CVE-2025-25153

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleq2mka72q 2025-02-07 12:08:44+00:00| seen| https://t.me/cvedetector/17482 2025-02-07 12:53:57+00:00| seen|...

CVE-2025-25111

creationtimestamp| type| source ---|---|--- 2025-02-07 10:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleoa3ni225 2025-02-07 12:00:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113962493470604940...

CVE-2025-22880

creationtimestamp| type| source ---|---|--- 2025-02-07 07:30:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113961429154590452 2025-02-07 08:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhl5vol2iw2t 2025-02-07 08:53:40+00:00| seen|...

CVE-2024-13492

creationtimestamp| type| source ---|---|--- 2025-02-07 06:12:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113961122659898498 2025-02-07 06:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkxaxwgpu2v 2025-02-07 07:57:36+00:00| seen|...

Security update for trivy (moderate)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2025:0056-1 Rating: moderate References: 1227010 1234512 1235265 Cross-References: CVE-2024-34155 CVE-2024-34156 CVE-2024-34158 CVE-2024-3817 CVE-2024-45337 CVE-2024-45338 CVE-2025-21613 CVE-2025-21614 CVSS scores:...

CVE-2025-21177

creationtimestamp| type| source ---|---|--- 2025-02-06 22:43:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113959359265888631 2025-02-06 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7pr3dzx2a 2025-02-07 00:24:14+00:00| seen|...

CVE-2024-57392

creationtimestamp| type| source ---|---|--- 2025-02-06 21:29:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113959065799738457 2025-02-06 22:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gpdegp2d 2025-02-06 22:49:14+00:00| seen|...

MGASA-2025-0040 Updated gstreamer1.0, gstreamer1.0-plugins-base & gstreamer1.0-plugins-good packages fix security vulnerabilities

GStreamer has an OOB-write in isomp4/qtdemux.c. CVE-2024-47537 GStreamer has a stack-buffer overflow in vorbishandleidentificationpacket. CVE-2024-47538 GStreamer has an OOB-write in converttos3341a. CVE-2024-47539 GStreamer uses uninitialized stack memory in Matroska/WebM demuxer. CVE-2024-47540...

Updated gstreamer1.0, gstreamer1.0-plugins-base & gstreamer1.0-plugins-good packages fix security vulnerabilities

GStreamer has an OOB-write in isomp4/qtdemux.c. CVE-2024-47537 GStreamer has a stack-buffer overflow in vorbishandleidentificationpacket. CVE-2024-47538 GStreamer has an OOB-write in converttos3341a. CVE-2024-47539 GStreamer uses uninitialized stack memory in Matroska/WebM demuxer. CVE-2024-47540...

4 Reasons Why MSPs & MSSPs Need to Enhance Attack Surface Management

In today’s rapidly evolving digital landscape, Managed Service Providers MSPs and Managed Security Service Providers MSSPs face increasing challenges. As businesses expand their digital footprints, MSPs and MSSPs are under pressure to deliver comprehensive security services while managing costs,...

Security Bulletin: Multiple security vulnerabilities were discovered in IBM Verify Identity Governance

Summary Multiple security vulnerabilities in IBM Java and IBM WebSphere Liberty have been addressed in the latest release of IBM Verify Identity Governance formerly known as IBM Security Verify Governance. Vulnerability Details CVEID:CVE-2024-27268 DESCRIPTION: IBM WebSphere Application Server...

CVE-2020-12110

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2022-43521

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

Mageia: Security Advisory (MGASA-2025-0039)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-49793

creationtimestamp| type| source ---|---|--- 2025-02-05 23:38:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113953911479301532 2025-02-06 00:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhso5x6252c 2025-02-06 02:44:21+00:00| seen|...

GO-2025-3454 Plenti - Code Injection - Denial of Services in github.com/plentico/plenti

Plenti - Code Injection - Denial of Services in github.com/plentico/plenti...

CVE-2022-37902

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...