ECHO-3CCF-9FB8-6EBF

Bulletin has no description...

Security Bulletin: Vulnerability in IBM Java affects IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products

Summary A vulnerability in IBM® Runtime Environment Java™ Technology Edition affect the product's management GUI and could cause a confidentiality impact. The Command Line Interface is unaffected. CVE-2025-30754. Vulnerability Details CVEID:CVE-2025-30754 DESCRIPTION: Vulnerability in the Oracle...

Security Bulletin: Vulnerabilities in multiple components affect IBM SAN Volume Controller, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in libssh, iputils, glib2, libtasn1 and gnutls components affect IBM Storage Virtualize products and could cause denial of service and confidentiality impacts. CVE-2025-47268 CVE-2025-4373 CVE-2024-12133 CVE-2025-48964 CVE-2024-12243. Vulnerability Details...

IBM Storage Virtualize IKEv1 Unauthorized Access

The vulnerability of the Internet Key Exchange IKEv1 protocol implementation in IBM Storage Virtualize software for virtualization of data storage systems is related to improper cleaning of dynamic memory. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to...

D-link DIR-878A1 USB storage processor Code Execution

The vulnerability of the USB storage processor module in D-link DIR-878A1 software routers is related to buffer overflows in the stack during the processing of the Serial Number field. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Nagios Log Server Privilege Bypass

The vulnerability of the Nagios Log Server software for monitoring and analyzing log files is related to the improper storage of permissions during the process of changing the email address of the user account. Exploiting this vulnerability allows a malicious actor to bypass existing security...

WordPress Job Board by BestWebSoft plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array Storage vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting via $GET Array Storage vulnerability discovered by Jamshed Yergashvoyev CVE Guy - Turan Security in WordPress Plugin Job Board by BestWebSoft versions = 1.2.1...

[SECURITY] Fedora 42 Update: podman-5.7.0-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Malicious code in @afetcan/storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abbde27cce56326711e4e32f42572cb60977ca7ccce4ebf1fcfa558a847c1a6 The package @afetcan/storage was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199515

Malicious code in @afetcan/storage npm...

Emerson ValveLink Information Disclosure

The vulnerability of software and hardware solutions for configuring, diagnosing, and controlling Emerson ValveLink SOLO, ValveLink DTM, ValveLink PRM, and ValveLink SNAP-ON relates to the unencrypted storage of confidential information. Exploiting this vulnerability can allow an attacker operati...

EUVD-2025-199041

Malicious code in react-native-modest-storage npm...

MAL-2025-191002 Malicious code in react-native-modest-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649036aaea8dd08096297925551b715d5783be0879a69a6651f2cfd66b8ee75f The package react-native-modest-storage was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-modest-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649036aaea8dd08096297925551b715d5783be0879a69a6651f2cfd66b8ee75f The package react-native-modest-storage was found to contain malicious code. Source: ghsa-malware...

Buffer Overflow

spdk is vulnerable to Buffer Overflow. The vulnerability is due to improper bounds handling in the NVMe-oF target component lib/nvmf, which allows an attacker to craft malicious input that can overflow buffers and potentially execute arbitrary code or cause a crash...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198745

Malicious code in zapier-async-storage npm...

MAL-2025-190788 Malicious code in zapier-async-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106802713a8738ac15728a0fdb19774a74ac3ae3aa76b501b8d4b08e8a7e5e The package zapier-async-storage was found to contain malicious code. Source: ghsa-malware...

Malicious code in zapier-async-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106802713a8738ac15728a0fdb19774a74ac3ae3aa76b501b8d4b08e8a7e5e The package zapier-async-storage was found to contain malicious code. Source: ghsa-malware...