org.infinispan:infinispan-distribution (>=15.0.0.Dev01 <=15.0.0.Dev10), org.infinispan:infinispan-javadoc-all (>=15.0.0.Dev01 <=15.0.0.Dev10) +7 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (>=15.0.0.Dev01 <=15.0.0.Dev06)

org.infinispan:infinispan-cachestore-sql MAVEN version =15.0.0.Dev01, =15.0.0.Dev01, =15.0.0.Dev01, =15.0.0.Dev06, =15.0.0.Dev01, =15.0.0.Dev01, =15.0.0.Dev01, =15.0.0.Dev01, =15.0.0.Dev01, =15.0.0.Dev01, =15.0.0.Dev10 Source cves: CVE-2023-5384 Source advisory: OSV:GHSA-GG57-587F-H5V6...

io.quarkus:quarkus-test-infinispan-client (>=2.5.0.CR1 <=3.0.0.Alpha2), org.infinispan:infinispan-cachestore-jdbc (>=13.0.0.CR1 <=14.0.24.Final) +16 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (>=13.0.0.CR1 <=14.0.24.Final)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version =13.0.0.CR1, =2.5.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =13.0.0.CR1, =14.0.10.Final, =13.0.0.CR1, =14.0.24.Final and more...

CVE-2023-5384

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials JDBC store with connection pooling, remote store, the credentials are returned in clear text as part of the configuration...

CVE-2023-5384

CVE-2023-5384 affects Infinispan: when serializing a cache configuration to XML/JSON/YAML that contains credentials (e.g., JDBC store with connection pooling, remote store), the credentials are returned in clear text as part of the configuration. This exposes sensitive data if the configuration i...

CVE-2023-5384 Infinispan: credentials returned from configuration as clear text

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials JDBC store with connection pooling, remote store, the credentials are returned in clear text as part of the configuration...

Debian DSA-5384-1 : openimageio - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5384 advisory. - A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master- branch-9aeece7a and v2.3.19.0. More specifically, in the way...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5384-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5384-1 advisory. It was discovered that the UDF file system implementation in the Linux kernel could attempt to dereference a null pointer in some situations...

Mozilla Firefox Security Advisory (MFSA2017-01) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2020-5384

Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability. A local unauthenticated attacker could potentially exploit this vulnerability by using an alternate path to bypass authentication in order to gain full access to the system...

CVE-2020-5384

CVE-2020-5384 affects RSA MFA Agent 2.0 for Microsoft Windows. The connected sources describe an authentication bypass vulnerability that an attacker with local access and no authentication could exploit via an alternate path to gain full control of the system. The material does not provide concr...

Huawei EulerOS: Security Advisory for fontconfig (EulerOS-SA-2016-1077)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-5384

HPE Intelligent Management Center (IMC) PLAT

CVE-2015-5384

CVE-2015-5384 affects AxiomSL’s Axiom Google Web Toolkit module up to version 9.5.3 and earlier, which is vulnerable to a Session Fixation attack. The connected CNVD entry confirms the affected version but provides no additional vulnerability details or remediation in the provided documents.

CVE-2018-5384 Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection

Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection. If successfully exploited the user can get info from the underlying postgresql database that could lead into to total compromise of the product. The said script is available...

CVE-2018-5384

CVE-2018-5384 affects Navarino Infinity web interface up to version 2.2. The vulnerability is an unauthenticated, blind SQL injection in a exposed script, enabling an attacker to query the underlying PostgreSQL database and potentially achieve total compromise of the product. The CVE is documente...

Security Bulletin: A vulnerability in fontconfig affects PowerKVM (CVE-2016-5384)

Summary PowerKVM is affected by a vulnerability in fontconfig. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-5384 DESCRIPTION: Fontconfig could allow a local attacker to execute arbitrary code on the system, caused by the lack of offsets validation. By using a...

CVE-2017-5384

Proxy Auto-Config PAC files can specify a JavaScript function called for all URL requests with the full URL path which exposes more information than would be sent to the proxy itself in the case of HTTPS. Normally the Proxy Auto-Config file is specified by the user or machine owner and presumed t...

CVE-2017-5384

CVE-2017-5384 : Information disclosure via Proxy Auto-Config (PAC) in Firefox

Navarino Infinity web interface is affected by multiple vulnerabilities.

Overview Navarino Infinity web interface up to version 2.2 is affected by multiple vulnerabilities. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2018-5384| Navarino Infinity exposes an unauthenticated script that is prone to blind sq...

EulerOS 2.0 SP1 : fontconfig (EulerOS-SA-2016-1077)

According to the version of the fontconfig packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that cache files were insufficiently validated in fontconfig. A local attacker could create a specially crafted cache file to...