24806 matches found
curl bug fix and enhancement update
An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.9...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4114 more potentially affected by CVE-2023-46589 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.95)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-46589 Source...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4114 more potentially affected by CVE-2023-46589 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.95)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-46589 Source...
Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to server-side request forgery due to Eclipse Jetty (261776)
Summary IBM Sterling Connect:Direct Web Services uses Eclipse Jetty. Vulnerability Details IBM X-Force ID: 261776 DESCRIPTION: Eclipse Jetty is vulnerable to server-side request forgery, caused by improper handling of XML external entity XXE declarations by the XmlParser. By sending a specially...
Malicious code in npm-base-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8600 Malicious code in npm-base-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in npm-base-template
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Security Bulletin: IBM Sterling Connect:Direct Browser User Interface is vulnerable to multiple vulnerabilities due to Jetty
Summary IBM Sterling Connect:Direct Browser User Interface uses Jetty server. Vulnerability Details IBM X-Force ID: 260681 DESCRIPTION: Eclipse Jetty is vulnerable to an XML external entity injection XXE attack when processing XML data, caused by a weakly configured XML parser. By using specially...
Adobe RoboHelp Server SQL Injection
The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server relates to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorize...
[SECURITY] Fedora 39 Update: gstreamer1-plugins-base-1.22.7-1.fc39
GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...
Fedora: Security Advisory for gstreamer1-plugins-base (FEDORA-2023-6a4aea6d13)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM TRIRIGA Application Platform discloses server-side request forgery (CVE-2020-11988)
Summary CV-2020-11988 Apache XML Graphis Commons is vulerable to server-side request forgery. Vulnerability Details CVEID: CVE-2020-11988 DESCRIPTION: Apache XML Graphics Commons is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a...
ai.tock:bot-test (>=23.3.2, <=23.9.0), ai.tock:bot-test-base (>=23.3.2, <=23.9.0) +1233 more potentially affected by CVE-2023-5072 via org.json:json (20230618)
org.json:json MAVEN version 20230618 is affected by a known vulnerability. The following packages have a transitive dependency on org.json:json and may be impacted: - ai.tock:bot-test =23.3.2, =23.3.2, =23.3.2, =23.3.2, =23.3.2, =23.3.2, =23.3.2, =23.3.2, =23.3.2, =23.3.2, =23.3.2, =23.3.2,...
2023-11 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5032198)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2023-11 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5032189)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2023-11 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5032198)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2023-11 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5032189)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2023-11 Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5032189)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2023-11 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5032189)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2023-11 Dynamic Cumulative Update for Windows 11 for ARM64-based Systems (KB5032192)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...