CVE-2022-47966

CVE-2022-47966 CVE-2022-47966용 POC로, 다음 ManageEngine 제품에 영향을 미칩니다: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint Central MSP Endpoin...

CVE-2022-47966-Scan

CVE-2022-47966 스캐너 소개 CVE-2022-47966은 최소 24개의 온프레미스 ManageEngine 제품에 영향을 미치는 중요한 무인증 원격 코드 실행 취약점입니다. 이 취약점은 SAML SSO가 활성화된 경우에만 적용됩니다. 일부 제품의 경우 SAML SSO가 이전에 활성화된 적이 있는 경우에도 적용됩니다. 타임라인 CVE-2022-47966은 Khoadha of Viettel Cyber Security가 발견했으며, 영향을 받는 제품에 대해 2022년 10월에 패치된 것으로 보입니다. 이 취약점은 영향을 받...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_1442)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221442 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPat...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2022_1491)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221491 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPat...

OESA-2025-2383 xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fixes: All versions of Apache Santuario - XML Security for Java...

EUVD-2012-4007

Malware in sbrugna...

EUVD-2013-2164

Malware in sbrugna...

EUVD-2013-2119

Malware in sbrugna...

EUVD-2013-2121

Malware in sbrugna...

EUVD-2013-2118

Malware in sbrugna...

EUVD-2019-0620

Malware in sbrugna...

EUVD-2021-2083

Malware in sbrugna...

EUVD-2022-5065

Malicious code in bioql PyPI...

EUVD-2023-2836

Malicious code in bioql PyPI...

EUVD-2022-5522

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-40690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the secureValidation property is not passed...

Linux Distros Unpatched Vulnerability : CVE-2023-44483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a privat...

Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities

Summary IBM Cognos Analytics is affected by vulnerabilities in IBM WebSphere Application Server Liberty and Open-Source Software OSS. Issues related to these components have been addressed by upgrading or removing the vulnerable libraries. Additionally, a cross-site scripting XSS vulnerability ha...

Linux Distros Unpatched Vulnerability : CVE-2019-12400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Liberty Profile affect IBM Robotic Process Automation.

Summary Multiple vulnerabilities in IBM WebSphere Liberty Profile affect IBM Robotic Process Automation. IBM WebSphere Liberty Profile is used by IBM Robotic Process Automation as part of UMS and as an application server for container deployments. This bulletin identifies the security fixes to...