j1939_session_activate() CAN Transport Buffer Overflow

The vulnerability of the j1939sessionactivate function in the net/can/j1939/transport.c module, which handles J1939 sockets for CAN interfaces in Linux operating systems, is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

EUVD-2024-51887

Malicious code in bioql PyPI...

PT-2025-18541

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3+ Description A vulnerability in the Linux kernel has been resolved, specifically in the libata-transport module. The issue arises from the lack of error handling in the ata tlink add function, where the...

Linux Distros Unpatched Vulnerability : CVE-2024-53215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: svcrdma: fix miss destroy percpucounter in svcrdmaprocinit There's issue as follows: RPC:...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Netty (CVE-2024-29025)

Summary Netty is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2024-29025 The below vulnerability have been addressed. Vulnerability Details CVEID:CVE-2024-29025 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid...

com.sksamuel.elastic4s:elastic4s_2.10 (>=0.90.13.1, <=0.90.13.2), com.sksamuel.elastic4s:elastic4s_2.11 (0.90.13.2) +1 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.90.13)

org.elasticsearch:elasticsearch MAVEN version 0.90.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 =0.90.13.1, =0.90.13.2 -...

CVE-2024-53215

In the Linux kernel, the following vulnerability has been resolved: svcrdma: fix miss destroy percpucounter in svcrdmaprocinit There's issue as follows: RPC: Registered rdma transport module. RPC: Registered rdma backchannel transport module. RPC: Unregistered rdma transport module. RPC:...

CVE-2024-53215

CVE-2024-53215 concerns the Linux kernel RcRPC/RDMA path (svcrdma) where percpu_counter destruction was mishandled during svc_rdma_proc_init()/svc_rdma_proc_cleanup(). If register_sysctl() returns NULL, percpu counters initialized in svc_rdma_proc_init() may not be destroyed, and on hotplug CPU e...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2024-27309)

Summary Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2024-27309 The below vulnerability have been addressed. Vulnerability Details CVEID:CVE-2024-27309 DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by improper access...

Security Bulletin: Due to use of Apache Pulsar, IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is vulnerable to a security restrictions bypass.

Summary Pulsar is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2024-28098, CVE-2024-29834 The below vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-28098 DESCRIPTION: Apache Pulsar could allow a remote authenticated attacker to bypa...

Security Bulletin: Due to use of Apache Pulsar, IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is vulnerable to security restrictions bypass

Summary Pulsar is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2023-51437 The below vulnerability have been addressed. Vulnerability Details CVEID:CVE-2023-51437 DESCRIPTION: Apache Pulsar could allow a remote attacker to bypass security restrictions, caused...

Security Bulletin: Due to the use of Netty, IBM Tivoli Netcool/OMNIbus Integration Libraries are vulnerable to a denial of service.

Summary Netty is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library and Probe DSL Factory Framework. CVE-2023-34462 Vulnerability Details CVEID:CVE-2023-34462 DESCRIPTION: Netty is vulnerable to a denial of service, caused by a flaw with allocating up to 16MB of heap f...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Netty (CVE-2022-41915)

Summary Netty CVE-2022-41915 is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library for the Probe for Message Bus integrations. The latest patch includes Netty 4.1.86.Final to fix the vulnerability. Vulnerability Details CVEID:CVE-2022-41915 DESCRIPTION: Netty is...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2023-25194)

Summary Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library as part of the Kafka integration. The latest patch includes Apache Kafka 3.4.0 to fix the vulnerability. CVE-2023-25194 Vulnerability Details CVEID:CVE-2023-25194 DESCRIPTION: Apache Kafka could...

Linux kernel IPsec DoS

The vulnerability of the j1939sessiondestroy function in the net/can/j1939/transport.c module is related to incorrect handling of block usage counters in IPsec components of the Linux operating system. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Probe and Integrations Library are affected by vulnerabilities in FasterXML jackson-databind (CVE-2022-42004, CVE-2022-42003)

Summary FasterXML jackson-databind is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library and Probe for Microsoft Exchange Web Services. The latest patches include FasterXML jackson-databind 2.13.4.2 that fixes the vulnerabilities. CVE-2022-42004, CVE-2022-42003...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2022-34917)

Summary Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library as part of the Kafka integration. The latest patch includes Apache Kafka 2.8.2 to fix the vulnerability. CVE-2022-34917 Vulnerability Details CVEID:CVE-2022-34917 DESCRIPTION: Apache Kafka is...

Paramiko SSHv2 Transport Buffer Overflow DoS

The vulnerability of the transport.py component in the SSHv2 protocol library for Python Paramiko is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service...

com.sksamuel.elastic4s:elastic4s_2.10 (>=0.90.13.1, <=0.90.13.2), com.sksamuel.elastic4s:elastic4s_2.11 (0.90.13.2) +1 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.13)

org.elasticsearch:elasticsearch MAVEN version 0.90.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 =0.90.13.1, =0.90.13.2 -...

com.sksamuel.elastic4s:elastic4s_2.10 (>=0.90.13.1, <=0.90.13.2), com.sksamuel.elastic4s:elastic4s_2.11 (0.90.13.2) +1 more potentially affected by CVE-2019-7614 via org.elasticsearch:elasticsearch (0.90.13)

org.elasticsearch:elasticsearch MAVEN version 0.90.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 =0.90.13.1, =0.90.13.2 -...