4985 matches found
Security Bulletin: Security vulnerability has been fixed in IBM Security Verify Governance, Identity Manager Software component (CVE-2022-35646)
Summary IBM Security Verify Governance, Identity Manager Software component has addressed the following vulnerability: An authenticated user may be able modify or cancel any other user's access request. Vulnerability Details CVEID:CVE-2022-35646 DESCRIPTION: IBM Security Verify Governance, Identi...
Security Bulletin: Security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component
Summary IBM Security Verify Governance, Identity Manager virtual appliance component has addressed the following vulnerabilities Vulnerability Details CVEID:CVE-2022-22457 DESCRIPTION: IBM Security Verify Governance stores sensitive information including user credentials in plain clear text which...
Security Bulletin: A security vulnerability has been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component (CVE-2022-22455)
Summary IBM Security Verify Governance, Identity Manager virtual appliance component has addressed the following vulnerability. Vulnerability Details CVEID:CVE-2022-22455 DESCRIPTION: IBM Security Verify Identity Manager performs an operation at a privilege level that is higher than the minimum...
CLSA-2025-1742731930 openssh: Fix of CVE-2025-26465
CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without truncation openssh bz3012 Orabug: 30448895...
CLSA-2025-1742722852 openssh: Fix of CVE-2025-26465
CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled...
CLSA-2025-1742661734 openssh: Fix of CVE-2025-26465
CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled...
PT-2025-12040 · Librechat · Librechat
Name of the Vulnerable Software and Affected Versions: danny-avila/librechat version v0.7.5-rc2 Description: An improper access control vulnerability exists in the delete attachments functionality. The endpoint does not verify whether the provided attachment ID belongs to the current user, allowi...
SUSE CVE-2025-25204
gh is GitHub's official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...
`gh attestation verify` returns incorrect exit code during verification if no attestations are present
...
MAL-2025-2262 Malicious code in json-schema-verify (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2806afc266e5a393fae137cdfc3b662c6185c8a15e38486f79a22f6962cd0ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in json-schema-verify (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2806afc266e5a393fae137cdfc3b662c6185c8a15e38486f79a22f6962cd0ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ai-verify-shared-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88a03bc9be981617ba8a71b55e2c7051d9cdf7397638bc7ec35ad84c17c455b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2237 Malicious code in ai-verify-shared-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88a03bc9be981617ba8a71b55e2c7051d9cdf7397638bc7ec35ad84c17c455b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: A Security Vulnerability was discoverd in IBM Security Verify Access and IBM Verify Identity Access (CVE-2025-0161)
Summary A Security Vulnerability was addressed in IBM Security Verify Access and IBM Verify Identity Access where a local user could execute arbitrary code. Vulnerability Details CVEID:CVE-2025-0161 DESCRIPTION: IBM Security Verify Access Appliance could allow a local user to execute arbitrary co...
The vulnerability of the IBM Security Verify Directory data integration tool lies in the insufficient checking of unusual or exceptional states, which allows a perpetrator to trigger a service failure.
The vulnerability of the IBM Security Verify Directory data integration tool is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Security update for pcr-oracle, shim
This update for pcr-oracle, shim fixes the following issues: pcr-oracle: predict SbatLevelRT for the next boot bsc1230316 shim was updated to version 15.8: Update shim-install to use the 'removable' way for encrypted SL-Micro images bsc1230316 Always use the removable way for SL-Micro Limit the...
Medium: openssh
Issue Overview: A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying...
The vulnerability of the IAM and user directory management software of IBM Security Verify Directory, which exists due to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary commands.
The vulnerability of the IAM and user directory management software of IBM Security Verify Directory exists due to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through a specially crafted request...
SUSE CVE-2022-49643
In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...
