CVE-2022-47966

CVE-2022-47966 针对以下 ManageEngine 产品的 CVE-2022-47966 的 POC： Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint Central MSP Endpoint DLP Ke...

CVE-2022-47966-Scan

CVE-2022-47966 扫描器 关于 CVE-2022-47966 是一个严重的未经身份验证的远程代码执行漏洞，影响了至少 24 款本地部署的 ManageEngine 产品。该漏洞仅在启用 SAML SSO 时适用。对于部分产品，如果之前启用过 SAML SSO 也同样适用。 时间线 CVE-2022-47966 由 Viettel Cyber Security 的 Khoadha 发现，似乎已在 2022 年 10 月针对受影响产品进行了修补。该漏洞存在于所有受影响应用使用的第三方库 Apache Santuario 中。 然而，ManageEngine 直到 2023 年 1...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2022_1491)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221491 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPat...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_1442)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221442 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPat...

OESA-2025-2383 xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fixes: All versions of Apache Santuario - XML Security for Java...

EUVD-2012-4007

Malware in sbrugna...

EUVD-2013-2164

Malware in sbrugna...

EUVD-2013-2119

Malware in sbrugna...

EUVD-2013-2121

Malware in sbrugna...

EUVD-2013-2118

Malware in sbrugna...

EUVD-2019-0620

Malware in sbrugna...

EUVD-2021-2083

Malware in sbrugna...

EUVD-2022-5065

Malicious code in bioql PyPI...

EUVD-2023-2836

Malicious code in bioql PyPI...

EUVD-2022-5522

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-40690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the secureValidation property is not passed...

Linux Distros Unpatched Vulnerability : CVE-2023-44483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a privat...

Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities

Summary IBM Cognos Analytics is affected by vulnerabilities in IBM WebSphere Application Server Liberty and Open-Source Software OSS. Issues related to these components have been addressed by upgrading or removing the vulnerable libraries. Additionally, a cross-site scripting XSS vulnerability ha...

Linux Distros Unpatched Vulnerability : CVE-2019-12400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Liberty Profile affect IBM Robotic Process Automation.

Summary Multiple vulnerabilities in IBM WebSphere Liberty Profile affect IBM Robotic Process Automation. IBM WebSphere Liberty Profile is used by IBM Robotic Process Automation as part of UMS and as an application server for container deployments. This bulletin identifies the security fixes to...