DeutschShown in its original language — a full translation is planned for a future version.
IBM QRadar SIEM Komponente: Mehrere Schwachstellen
view advisory published 2025-08-25
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM Komponenten ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.
01
describes (57)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-55668US | — | Exploit | ||
Session Fixation vulnerability in Apache Tomcat via rewrite valve.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 t… | ||||
| CVE-2025-6965US | high7.7 | Exploit | ||
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti… | ||||
| CVE-2025-53506US | — | — | ||
Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent st… | ||||
| CVE-2025-52520US | — | — | ||
For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.
This issue affects Apach… | ||||
| CVE-2025-52434US | — | — | ||
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularl… | ||||
| CVE-2025-46835US | — | — | ||
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously… | ||||
| CVE-2025-27614US | — | — | ||
Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the reposito… | ||||
| CVE-2025-27613US | — | — | ||
Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the… | ||||
| CVE-2025-7425US | — | — | ||
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, r… | ||||
| CVE-2025-48385US | — | — | ||
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning… | ||||
| CVE-2025-48384US | —OT critical | KEV | ||
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading… | ||||
| CVE-2025-38086US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: ch9200: fix uninitialised access during mii_nway_restart
In mii_nway_restart() the code attempts to call… | ||||
| CVE-2022-50020US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid resizing to a partial cluster size
This patch avoids an attempt to resize the filesystem to an
una… | ||||
| CVE-2022-49977US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
ftrace_startup does not remov… | ||||
| CVE-2025-38079US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_hash - fix double free in hash_accept
If accept(2) is called on socket type algif_hash with
MSG_… | ||||
| CVE-2025-38052US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
Syzbot reported a slab-use-after-free with th… | ||||
| CVE-2025-49796US | — | — | ||
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a ma… | ||||
| CVE-2025-49794US | — | — | ||
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/… | ||||
| CVE-2025-6021US | — | — | ||
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory… | ||||
| CVE-2025-48060US | high7.5 | Exploit | ||
jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-f… | ||||
showing 20 of 57
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2025:14746 vom 2025-08-27external
- Red Hat Security Advisory RHSA-2025:14748 vom 2025-08-27external
- Oracle Linux Security Advisory ELSA-2025-17161 vom 2025-10-21external
- Oracle Linux Security Advisory ELSA-2025-22910 vom 2026-01-29external
- Oracle Linux Security Advisory ELSA-2026-1581 vom 2026-03-04external
- WID-SEC-W-2025-1905 - CSAF Versionself
- WID-SEC-2025-1905 - Portal Versionself
- IBM Security Bulletin 7243011 vom 2025-08-25external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan