APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) Security Vulnerabilities

Tuesday, July 2, 2024 Security Releases

Summary The Node.js project will release new versions of the 22.x, 20.x, 18.x releases lines on or shortly after, Tuesday, July 2, 2024 in order to address: 1 high severity issues. 2 medium severity issues. 3 low severity issues. Node.js fetch will be upgraded to undici v6.19.2 on Node.js 18.x...

GHSA-88H4-JW57-85V9 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21062 vulnerabilities

Vulnerabilities for packages:...

GHSA-5XQ9-RCPJ-P52V vulnerabilities

Vulnerabilities for packages:...

GHSA-R27R-5FWH-VXQW vulnerabilities

Vulnerabilities for packages:...

CVE-2022-41862 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10

CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10. A patched version of the package is...

CVE-2019-10086 vulnerabilities

Vulnerabilities for packages:...

CVE-2019-17414 affecting package vino 3.22.0-20

CVE-2019-17414 affecting package vino 3.22.0-20. No patch is available...

CVE-2019-12280 affecting package toolbox 0.0.18-9

CVE-2019-12280 affecting package toolbox 0.0.18-9. This CVE either no longer is or was never...

CVE-2016-9179 affecting package lynx 2.9.0~dev.9-5

CVE-2016-9179 affecting package lynx 2.9.0~dev.9-5. This CVE either no longer is or was never...

GHSA-VQ7J-GX56-RXJH vulnerabilities

Vulnerabilities for packages: kind, falco,...

CVE-2022-3064 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-28219 vulnerabilities

Vulnerabilities for packages: pytorch, kubeflow-pipelines-visualization-server,...

GHSA-M87M-MMVP-V9QM vulnerabilities

Vulnerabilities for packages:...

CVE-2022-36227 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-21724 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-28946 vulnerabilities

Vulnerabilities for packages:...

CVE-2019-13638 vulnerabilities

Vulnerabilities for packages:...

CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0

CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0. A patched version of the package is...

CVE-2024-20994 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21885 vulnerabilities

Vulnerabilities for packages:...

GHSA-49WX-9H9F-8C9G vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21886 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-31080 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-3857 affecting package syslinux 6.04-10

CVE-2022-3857 affecting package syslinux 6.04-10. No patch is available...

CVE-2022-3162 affecting package keda 2.4.0-20

CVE-2022-3162 affecting package keda 2.4.0-20. No patch is available...

CVE-2019-15484 affecting package bolt 0.9.2-2

CVE-2019-15484 affecting package bolt 0.9.2-2. This CVE either no longer is or was never...

CVE-2022-31321 affecting package bolt 0.9.2-2

CVE-2022-31321 affecting package bolt 0.9.2-2. This CVE either no longer is or was never...

CVE-2022-41725 affecting package msft-golang for versions less than 1.19.6-1

CVE-2022-41725 affecting package msft-golang for versions less than 1.19.6-1. A patched version of the package is...

CVE-2022-45639 affecting package sleuthkit 4.9.0-4

CVE-2022-45639 affecting package sleuthkit 4.9.0-4. No patch is available...

CVE-2022-47021 affecting package opusfile 0.12-2

CVE-2022-47021 affecting package opusfile 0.12-2. No patch is available...

CVE-2022-4123 affecting package podman 4.1.1-21

CVE-2022-4123 affecting package podman 4.1.1-21. No patch is available...

CVE-2022-4055 affecting package xdg-utils 1.1.3-7

CVE-2022-4055 affecting package xdg-utils 1.1.3-7. No patch is available...

CVE-2022-42969 affecting package python-py 1.10.0-3

CVE-2022-42969 affecting package python-py 1.10.0-3. No patch is available...

CVE-2022-2929 affecting package dhcp 4.4.3-3

CVE-2022-2929 affecting package dhcp 4.4.3-3. This CVE either no longer is or was never...

CVE-2022-31629 affecting package php 7.4.14-3

CVE-2022-31629 affecting package php 7.4.14-3. This CVE either no longer is or was never...

CVE-2022-38752 affecting package snakeyaml 1.25-2

CVE-2022-38752 affecting package snakeyaml 1.25-2. This CVE either no longer is or was never...

CVE-2022-36069 affecting package poetry 1.0.10-2

CVE-2022-36069 affecting package poetry 1.0.10-2. No patch is available...

CVE-2022-1615 affecting package samba 4.12.5-6

CVE-2022-1615 affecting package samba 4.12.5-6. No patch is available...

CVE-2022-25857 affecting package snakeyaml 1.25-2

CVE-2022-25857 affecting package snakeyaml 1.25-2. This CVE either no longer is or was never...

CVE-2022-36033 affecting package jsoup 1.11.3-3

CVE-2022-36033 affecting package jsoup 1.11.3-3. No patch is available...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: goreleaser, kubescape, zarf, falco, tkn, zot, apko, aactl, policy-controller, gitsign, vexctl, wolfictl, neuvector-sigstore-interface, melange, falcoctl, ko, spire-server, tekton-chains, skaffold, slsa-verifier,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, goreleaser, dgraph, dotnet, node-problem-detector, terraform, terraform-provider-azurerm, bom, prometheus-bind-exporter, telegraf, minio, memcached-exporter, opentofu, haproxy-ingress, helm, gke-gcloud-auth-plugin,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: cert-manager, opentelemetry-collector-contrib, goreleaser, keda, kubescape, zarf, gitlab-shell, terragrunt, terraform, fulcio, terraform-provider-azurerm, k3d, tkn, zot, loki, nuclei, opentofu, gitlab-runner, aactl, policy-controller, pulumi, argo-cd,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: goreleaser, grype, kubescape, cadvisor, crossplane, buf, tkn, zot, telegraf, datadog-agent, loki, aactl, prometheus, kargo, docker-compose, wolfictl, melange, buildkitd, ko, ctop, spire-server, trivy, conftest, syft, kaniko, up,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: cert-manager, keda, kubescape, falco, terragrunt, fulcio, kots, tkn, aactl, argo-cd, traefik, dex, argo-workflows, gitsign, oauth2-proxy, kyverno, vexctl, tekton-pipelines, istio-pilot-discovery, cosign, spire-server, external-secrets-operator, vault, tekton-chains,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: goreleaser, grype, kubescape, cadvisor, crossplane, buf, tkn, zot, telegraf, datadog-agent, loki, aactl, prometheus, kargo, docker-compose, wolfictl, melange, buildkitd, ko, ctop, spire-server, trivy, conftest, syft, kaniko, up,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terragrunt, terraform, terraform-provider-azurerm, clusterctl, crossplane, k8sgpt-operator, newrelic-infra-operator, prometheus-bind-exporter, zot,...