Security Bulletin: Due to use of Apache Commons IO, IBM MobileFirst Foundation is vulnerable to Uncontrolled Resource Consumption (CVE-2024-47554)

Summary Apache Commons IO is used by IBM MobileFirst Foundation as part of file handling operations. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively...

Linux Distros Unpatched Vulnerability : CVE-2023-29449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script...

The vulnerability of the parallel programming library for clusters, the Intel MPI Library, and the Intel oneAPI HPC Toolkit software development tools lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the parallel programming library for clusters, the Intel MPI Library, and the Intel oneAPI HPC Toolkit software development tools, is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel Quartus Prime’s automated design system lies in its uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of Intel Quartus Prime’s automated design system is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Safearchive library for processing tar and zip archives lies in its uncontrolled search path element, which allows attackers to escalate their privileges.

The vulnerability of the Safearchive library for processing tar and zip archives is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server allows a perpetrator to cause service failures.

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...

The vulnerability of Intel High Level Synthesis (HLS) compilers lies in their uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Intel’s High-Level Synthesis HLS compilers is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the software for adjusting performance with the Intel Extreme Tuning Utility (Intel XTU) involves an uncontrolled search path element, allowing attackers to enhance their privileges.

The vulnerability of the software for configuring Intel Extreme Tuning Utility Intel XTU is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the Intel oneAPI Base Toolkit, related to an uncontrolled element in the search process, allows attackers to enhance their privileges.

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the set of development tools Intel oneAPI Base Toolkit, is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow attackers to enhance their...

Linux Distros Unpatched Vulnerability : CVE-2022-30632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containin...

Linux Distros Unpatched Vulnerability : CVE-2022-30633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshallin...

CVE-2024-10930

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...

CVE-2024-10930 Carrier Block Load Privilege Escalation

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...

CVE-2024-10930

CVE-2024-10930 affects Carrier Block Load software (Carrier Inc.), versions 4.00–4.16. The issue is an Uncontrolled Search Path Element that could allow DLL hijacking and arbitrary code execution with elevated privileges. Exploitation is reportedly active per PT-2025-7322; multiple advisories (e....

The vulnerability of the Intel Thread Director Visualizer, a tool for visualizing CPU loading, stems from an uncontrolled element in the search process. This allows attackers to exploit their privileges.

The vulnerability of the Intel Thread Director Visualizer, a tool for visualizing CPU loading, is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...

AZL-57694 CVE-2024-45778 affecting package grub2 for versions less than 2.06-25

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash...

CVE-2024-45778

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash...

CVE-2024-45778 Grub2: fs/bfs: integer overflow in the bfs parser.

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash...

CVE-2025-27099

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting XSS via the tracker names used in the semantic timeframe deletion message. A tracker administrator with a semantic timeframe used by other trackers could use this...

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Acronis Cyber Protect 16 data protection software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...