28604 matches found
ECHO-3CCF-9FB8-6EBF
Bulletin has no description...
Security Bulletin: Vulnerability in IBM Java affects IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products
Summary A vulnerability in IBM® Runtime Environment Java™ Technology Edition affect the product's management GUI and could cause a confidentiality impact. The Command Line Interface is unaffected. CVE-2025-30754. Vulnerability Details CVEID:CVE-2025-30754 DESCRIPTION: Vulnerability in the Oracle...
Security Bulletin: Vulnerabilities in multiple components affect IBM SAN Volume Controller, IBM Spectrum Virtualize and IBM FlashSystem products
Summary Vulnerabilities in libssh, iputils, glib2, libtasn1 and gnutls components affect IBM Storage Virtualize products and could cause denial of service and confidentiality impacts. CVE-2025-47268 CVE-2025-4373 CVE-2024-12133 CVE-2025-48964 CVE-2024-12243. Vulnerability Details...
WordPress Job Board by BestWebSoft plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array Storage vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting via $GET Array Storage vulnerability discovered by Jamshed Yergashvoyev CVE Guy - Turan Security in WordPress Plugin Job Board by BestWebSoft versions = 1.2.1...
[SECURITY] Fedora 42 Update: podman-5.7.0-1.fc42
podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...
Malicious code in @afetcan/storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abbde27cce56326711e4e32f42572cb60977ca7ccce4ebf1fcfa558a847c1a6 The package @afetcan/storage was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199515
Malicious code in @afetcan/storage npm...
Malicious code in react-native-modest-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649036aaea8dd08096297925551b715d5783be0879a69a6651f2cfd66b8ee75f The package react-native-modest-storage was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191002 Malicious code in react-native-modest-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649036aaea8dd08096297925551b715d5783be0879a69a6651f2cfd66b8ee75f The package react-native-modest-storage was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199041
Malicious code in react-native-modest-storage npm...
Buffer Overflow
spdk is vulnerable to Buffer Overflow. The vulnerability is due to improper bounds handling in the NVMe-oF target component lib/nvmf, which allows an attacker to craft malicious input that can overflow buffers and potentially execute arbitrary code or cause a crash...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in zapier-async-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106802713a8738ac15728a0fdb19774a74ac3ae3aa76b501b8d4b08e8a7e5e The package zapier-async-storage was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198745
Malicious code in zapier-async-storage npm...
MAL-2025-190788 Malicious code in zapier-async-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106802713a8738ac15728a0fdb19774a74ac3ae3aa76b501b8d4b08e8a7e5e The package zapier-async-storage was found to contain malicious code. Source: ghsa-malware...
CVE-2025-65998 Apache Syncope: Default AES key used for internal password encryption
Apache Syncope can be configured to store the user password values in the internal database with AES encryption, though this is not the default option. When AES is configured, the default key value, hard-coded in the source code, is always used. This allows a malicious attacker, once obtained...
PT-2025-47918
Name of the Vulnerable Software and Affected Versions Apache Syncope versions prior to 3.0.15 Apache Syncope versions prior to 4.0.3 Description Apache Syncope, when configured to use AES encryption for storing user passwords in its internal database, utilizes a hard-coded default key. This allow...
AMD StoreMI 安全漏洞
AMD StoreMI is an intelligent storage management technology developed by AMD that automatically optimizes the location of data storage to improve system performance by combining the benefits of solid state drives SSDs and mechanical hard drives HDDs. AMD StoreMI suffers from a default privilege...
