Bundesamt für Sicherheit in der Informationstechnik vulnerabilities and threats

Multiple vulnerabilities have been identified in ESRI ArcGIS, a geographic information system software. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided in the available information.

Die util-linux Pakete enthalten viele verschiedene low-level Systemwerkzeuge, welche unerlässlich für den Betrieb eines Linux Betriebssystems sind.

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.

Multiple vulnerabilities have been identified in IBM WebSphere Application Server versions prior to 9.0.5.28. IBM has released version 9.0.5.28 which contains fixes addressing these security issues. The vulnerabilities affect the J2EE application server component of IBM WebSphere Application Server and related IBM Business Automation Workflow products.

Drupal ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. Über zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.

A vulnerability in the open-source LangChain framework, which facilitates development with large language models (LLMs), allows information disclosure and bypassing of security controls. The affected versions include all versions prior to 1.3.9 and version 1.3.9 itself. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild, and no official patch or remediation guidance is currently available from the vendor advisory.

Multiple vulnerabilities have been identified in Vim (Vi IMproved), affecting all versions up to and including 9.2.0662. No specific technical details or CVE identifiers are provided beyond references to several CVEs. There are no known exploits in the wild at this time, and no patch or remediation information is currently available.

A vulnerability in FreeRDP, an open-source implementation of the Remote Desktop Protocol (RDP), allows for potential code execution and denial of service. The issue affects versions up to and including 3.27.1. No CVE identifier or CVSS score is currently assigned. There is no information about known exploits in the wild or available patches. The vulnerability was published by the German Federal Office for Information Security (BSI).

libTIFF ist ein Softwarepaket für die Verarbeitung von Bilddateien in Tag Image File Format (TIFF).

CUPS (Common Unix Printing System) ist ein Printspooler, der es lokalen und entfernten Benutzern ermöglicht, Druckfunktionen über das Internet Printing Protocol (IPP) zu nutzen.

Langflow bietet eine visuelle Schnittstelle zum Erstellen von LLM-basierten Anwendungen.

A vulnerability in IGEL OS, the Linux-based operating system for IGEL computers, allows for code execution. The affected versions include all versions prior to and including 12.7.6. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild. No patch or remediation information is available from the vendor advisory.

Open Source vLLM ist eine Open-Source-Bibliothek für schnelle und effiziente Inferenz von Large Language Models (LLMs).

LiteLLM ist ein Gateway, das eine einheitliche Schnittstelle für verschiedene Large Language Models (LLMs) bietet.

A vulnerability in IGEL OS, the Linux-based operating system by IGEL Computers, allows execution of arbitrary code with administrator privileges. The issue affects versions up to and including 11.11.150. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or available patches at this time.

Multiple vulnerabilities have been identified in Zammad, a helpdesk and ticketing system. The affected versions include all versions up to and including 7.1. No specific details about the nature of these vulnerabilities or their impact are provided. There is no CVSS score available for these issues. No known exploits are reported in the wild. No patch or remediation information is provided by the vendor advisory.

FactoryTalk ist eine Software für die industrielle Automatisierung, die zur Maximierung der Effizienz und Steigerung der Anlagenproduktivität entwickelt wurde.

Multiple vulnerabilities have been identified in PJSIP, an open-source multimedia library implementing the Session Initiation Protocol (SIP). The advisory is published by the German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik). No specific CVEs or technical details about the vulnerabilities are provided. There is no information on affected versions or known exploits in the wild. No patch or remediation details are available at this time.

A vulnerability in OpenBSD, a Unix-like operating system derived from BSD-Unix, allows bypassing of security measures. The issue affects OpenBSD versions up to and including 7.6. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild reported at this time. No patch or remediation details are currently available from the vendor advisory.