Category: CVSS2 - MEDIUM
Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Apache Kafka

## Summary Vulnerability in Apache Kafka allow a remote authenticated attacker to execute arbitrary code may affect IBM Spectrum Control. ## Vulnerability Details ** CVEID: **[CVE-2023-25194]() ** DES ...

Continue Reading
Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Node.js

## Summary Vulnerability in Node.js allow a denial of service, caused by a regular expression may affect IBM Spectrum Control. ## Vulnerability Details ** CVEID: **[CVE-2023-24807]() ** DESCRIPTION: * ...

Continue Reading
(RHSA-2023:3665) Important: c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) For more ...

Continue Reading
(RHSA-2023:3741) Important: c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067) For more ...

Continue Reading
CVE-2023-25194

A flaw was found in Apache Kafka Connect's REST API that permits configuration of SASL property by an authenticated operator, which could allow connection to a malicious LDAP server and subsequent des ...

Continue Reading
(RHSA-2023:3771) Important: Red Hat Virtualization security and bug fix update

The VDSM service is required by a Virtualization Manager to manage the Linux hosts. VDSM manages and monitors the host's storage, memory and networks as well as virtual machine creation, other host ad ...

Continue Reading
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 12, 2023 to June 18, 2023)

Last week, there were 60 vulnerabilities disclosed in 52 WordPress Plugins and no WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 25 Vulnerab ...

Continue Reading
Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in Node.js (CVE-2022-43548, CVE-2020-7676, CVE-2021-42550, CVE-2021-38561, CVE-2022-32149)

## Summary IBM Planning Analytics Workspace is affected by vulnerabilities. Node.js is an open-source and cross-platform JavaScript runtime environment (CVE-2023-23918, CVE-2023-23920, CVE-2023-24807, ...

Continue Reading
CVE-2023-33141

Yet Another Reverse Proxy (YARP) Denial of Service VulnerabilityRead More ...

Continue Reading
CVE-2019-25152

The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and includ ...

Continue Reading
Load more