29407 matches found
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Recursion vulnerability in Apache Commons [CVE-2025-48924]
Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Recursion vulnerability in Apache Commons Lang, caused by the methods ClassUtils.getClass... possibily throwing a StackOverflowError on very long inputs CVE-2025-48924. Apache Commons is used in our speech service...
CVE-2025-31971
AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability. The issue may allow attackers to launch a server-side request forgery SSRF attack enabling unauthorized network calls from the system, potentially exposing internal services or sensitive information...
CVE-2025-31971 AIML Solutions for HCL SX is susceptible to a URL validation vulnerability
AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability. The issue may allow attackers to launch a server-side request forgery SSRF attack enabling unauthorized network calls from the system, potentially exposing internal services or sensitive information...
CVE-2025-58334
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
CVE-2025-58334
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal vulnerability in rsync [CVE-2024-12088]
Summary IBM Watson Speech Services Cartridge is vulnerable to a path traversal vulnerability in rsync, due to an issue when using the --safe-links option, where the client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it...
CVE-2025-58334
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
CVE-2025-58334
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
CVE-2025-58334
The CVE-2025-58334 vulnerability affects JetBrains IDE Services prior to 2025.5.0.1086 and 2025.4.2.2164, where users without proper permissions could assign themselves a high-privilege role. This stems from an improper privilege assignment mechanism discussed across multiple sources. Impact focu...
MAL-2025-41931 Malicious code in @rbapp/services (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @rbapp/services (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41923 Malicious code in @rbacore/services (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @rbacore/services (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41528 Malicious code in @twork-data-services/sme-customer-employee-company (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41527 Malicious code in @twork-data-services/sme-company-search (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41526 Malicious code in @twork-data-services/sme-agent-company-relation (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41524 Malicious code in @twork-data-services/proxy-prime-call-get-account-options (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41523 Malicious code in @twork-data-services/proxy-prime-api-v6-customer-account-lite-info (npm)
--- -= Per source details. Do not edit below this line.=-...