elita (>=0.60.0, <=0.64.1) potentially affected by CVE-2017-5200 via salt (2014.1.10)

salt PYPI version 2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2017-5200 Source advisory: OSV:GHSA-8R7R-X48R-PF8F...

com.bbossgroups.plugins:bboss-plugin-hibernate (4.10.8), esper:esper (1.11.0) +3 more potentially affected by CVE-2017-3589 via mysql:mysql-connector-java (3.1.14)

mysql:mysql-connector-java MAVEN version 3.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.bbossgroups.plugins:bboss-plugin-hibernate 4.10.8 - esper:esper 1.11.0 - org.eweb4j:eweb4j-all =1.8.6,...

com.mozu:mozu-api-java (>=1.7.16, <=1.24.11), com.mozu:mozu-api-toolkit (>=1.0.14, <=1.1.7) +1 more potentially affected by CVE-2017-3589 via mysql:mysql-connector-java (3.0.10)

mysql:mysql-connector-java MAVEN version 3.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.mozu:mozu-api-java =1.7.16, =1.0.14, =1.1.7 - jcs:jcs 1.3 Source cves: CVE-2017-3589 Source advisory:...

org.openwfe:openwfe-embed (1.7.2), org.openwfe:openwfe-engine (1.7.2) +3 more potentially affected by CVE-2017-3589 via mysql:mysql-connector-java (3.1.13)

mysql:mysql-connector-java MAVEN version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - org.openwfe:openwfe-embed 1.7.2 - org.openwfe:openwfe-engine 1.7.2 - org.openwfe:openwfe-sql 1.7.2 -...

ai.databand.azkaban:azkaban-common (3.18.0), ai.databand.azkaban:azkaban-exec-server (3.18.0) +2655 more potentially affected by CVE-2017-3589 via mysql:mysql-connector-java (>=5.0.2, <=5.1.41)

mysql:mysql-connector-java MAVEN version =5.0.2, =1.0.0, =1.1.5.release, =1.0.1, =0.0.1, =0.3.0, =0.2.0, =0.2.0, =0.4.1 and more Source cves: CVE-2017-3589 Source advisory: OSV:GHSA-CJCF-WM2P-59H5...

OpenStack Nova DoS by rebuilding the same instance with a new image multiple times

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

Dulwich RCE Vulnerability

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

absorbing-centrality (0.1.0), abtests (>=0.0.1, <=0.0.2.1) +113 more potentially affected by CVE-2017-12852 via numpy (>=1.8.1, <=1.13.1)

numpy PYPI version =1.8.1, =0.0.1, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =1.0.2 - cami-opal 0.2.5 and more Source cves: CVE-2017-12852 Source advisory: OSV:GHSA-FRGW-FGH6-9G52...

absorbing-centrality (0.1.0), abtests (>=0.0.1, <=0.0.2.1) +113 more potentially affected by CVE-2017-12852 via numpy (>=1.8.1, <=1.13.1)

numpy PYPI version =1.8.1, =0.0.1, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =1.0.2 - cami-opal 0.2.5 and more Source cves: CVE-2017-12852 Source advisory: GHSA-FRGW-FGH6-9G52...

atlassian-jwt-auth (>=1.0.9, <=3.0.0), clink (>=0.10.0, <=0.23.0) +21 more potentially affected by CVE-2017-11424 via pyjwt (>=1.0.1, <=1.5.0)

pyjwt PYPI version =1.0.1, =1.0.9, =0.10.0, =0.0.1, =0.5.0, =0.1.1, =1.0.0a2, =0.4.15, =0.1.1, =1.0.0, =0.0.1, =0.9.0, =0.0.1.dev1, =0.0.1.dev3, =0.0.1.dev6 - mbq-tokens 0.0.1 and more Source cves: CVE-2017-11424 Source advisory: OSV:GHSA-R9JW-MWHQ-WP62...

@ftnk/electron-prebuilt-compile (1.7.3), downloadbycurl (1.0.0) +6 more potentially affected by CVE-2017-1000424 via electron (>=1.7.0, <=1.7.5)

electron NPM version =1.7.0, =1.7.0, =1.0.0, =0.0.1, =1.1.2, =1.3.2 Source cves: CVE-2017-1000424 Source advisory: OSV:GHSA-6H98-CF9G-VMG2...

css-semdiff (>=1.0.2, <=1.1.0), dtsm (>=1.0.0, <=1.1.0) +2 more potentially affected by CVE-2017-1000451 via fs-git (1.0.1)

fs-git NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fs-git and may be impacted: - css-semdiff =1.0.2, =1.0.0, =1.1.0 - grunt-dtsm 1.0.0 - packagemanager-backend 1.0.0 Source cves: CVE-2017-1000451 Source advisory:...

@cicctencent/tars-deploy (>=1.0.1, <=1.0.10), @conga/framework-profiler (>=2.0.0, <=2.0.5) +12 more potentially affected by CVE-2017-1000220 via pidusage (>=1.0.1, <=1.1.4)

pidusage NPM version =1.0.1, =1.0.1, =2.0.0, =0.0.1, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =0.1.4-rc.1, =0.1.4 - shady-background 0.0.1 - shady-worker 0.0.4 - trek-status-monitor 0.3.3 - wf-pm2 1.1.3 Source cves: CVE-2017-1000220 Source advisory: OSV:GHSA-H2P3-H48H-9JJ7...

CVE-2017-1000220

creationtimestamp| type| source ---|---|--- 2022-05-13 01:41:00+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h2p3-h48h-9jj7...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-4) potentially affected by CVE-2017-1000096 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-4)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-4...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1) +1 more potentially affected by CVE-2017-1000096 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-3) potentially affected by CVE-2017-1000096 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-3...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12-beta-2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12-beta-2) +1 more potentially affected by CVE-2017-1000096 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12-beta-2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12-beta-2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-2) potentially affected by CVE-2017-1000096 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-2...

cn.dreampie:resty-server (1.3.0.release), com.github.chrisdchristo:pipe (1.0.0) +31 more potentially affected by CVE-2017-12165 via io.undertow:undertow-core (2.0.0.alpha1)

io.undertow:undertow-core MAVEN version 2.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cn.dreampie:resty-server 1.3.0.release - com.github.chrisdchristo:pipe 1.0.0 -...