CVE-2023-2307

creationtimestamp| type| source ---|---|--- 2023-04-26 20:25:54+00:00| seen| https://t.me/cibsecurity/62911...

qwik-lottie (>=0.0.5, <=0.0.6), storybook-framework-qwik (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-2307 via @builder.io/qwik-city (>=0.0.112, <=0.0.128)

@builder.io/qwik-city NPM version =0.0.112, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2023-2307 Source advisory: GHSA-C54W-7J5F-XG98...

qwik-lottie (>=0.0.5, <=0.0.6), storybook-framework-qwik (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-2307 via @builder.io/qwik-city (>=0.0.112, <=0.0.128)

@builder.io/qwik-city NPM version =0.0.112, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2023-2307 Source advisory: OSV:GHSA-C54W-7J5F-XG98...

CVE-2023-2307

Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...

CVE-2023-2307 Cross-Site Request Forgery (CSRF) in builderio/qwik

Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...

qwik-lottie (>=0.0.5, <=0.0.6), storybook-framework-qwik (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-2307 via @builder.io/qwik-city (>=0.0.112, <=0.0.128)

@builder.io/qwik-city NPM version =0.0.112, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2023-2307 Source advisory: MEND:CVE-2023-2307...

CVE-2023-2307 Cross-Site Request Forgery (CSRF) in builderio/qwik

Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...

CVE-2023-2307

CVE-2023-2307 describes a Cross-Site Request Forgery (CSRF) vulnerability in the GitHub repository for builderio/qwik. The vulnerability affects versions prior to 0.104.0, where an attacker could abuse CSRF to perform unintended actions in scoped user contexts. Public sources consistently referen...

MSC-2022-2307

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

CVE-2022-2307

A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted,...

GitLab 13.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2307)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows...

SUSE SLED15 / SLES15 Security Update : ldb, samba (SUSE-SU-2022:2307-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2307-1 advisory. - MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-3670 Note that Nessus has not tested for this issue but ha...

openSUSE: Security Advisory for ldb, (SUSE-SU-2022:2307-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

io.fabric8.jenkins.plugins:openshift-sync (>=0.1.18, <=1.0.42) potentially affected by CVE-2020-2307 via org.csanchez.jenkins.plugins:kubernetes (0.10)

org.csanchez.jenkins.plugins:kubernetes MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.1.18, =1.0.42 Source cves:...

io.fabric8.jenkins.plugins:openshift-sync (>=1.0.43, <=1.0.45) potentially affected by CVE-2020-2307 via org.csanchez.jenkins.plugins:kubernetes (1.18.2)

org.csanchez.jenkins.plugins:kubernetes MAVEN version 1.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =1.0.43, =1.0.45 Source cves:...

American Auto-Matrix Front-End Solutions Vulnerabilities

OVERVIEW Independent researcher Maxim Rupp has identified a local file inclusion and a plain text storage of password vulnerabilities in American Auto-Matrix’s Building Automation Front-End Solutions application. The Aspect-Matrix hardware platform was made end of life in 2015 and will no longer...

Moderate: Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update

An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2021-2307 affecting package mysql 8.0.23-1

CVE-2021-2307 affecting package mysql 8.0.23-1. An upgraded version of the package is available that resolves this issue...

SUSE: Security Advisory (SUSE-SU-2020:2307-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2307-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...