Linux

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent

Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install

Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compr

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and gene

A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lea

IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to

IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 2108

IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy.

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way u

IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be use

IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacke

IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker

IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extensio

IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a speci

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information ca

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header i

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitiv

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive infor

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor

IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vu

The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() fun

Implemented protections on AWS credentials that were not properly protected.

Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 buc

Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/t

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by

IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to

IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed a

IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co

There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspec

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buff

An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead t

While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be config

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the dat

An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimite

IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a

IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1.

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitiv

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable t

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to tr