2023-03 Cumulative Update for Windows 11 for x64-based Systems (KB5023698)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2023-03 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5023705)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2023-03 Dynamic Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5023706)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2023-03 Cumulative Update for Windows 11 Version 22H2 for ARM64-based Systems (KB5023706)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Malicious Package

Overview clientcore-base-businesslogic is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview clientcore-base-serviceclients is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

sap-ai-sdk-core (>=3.0.3, <=3.0.11) potentially affected by CVE-2023-25617 via sap-ai-sdk-base (>=3.1.2, <=3.1.6)

sap-ai-sdk-base PYPI version =3.1.2, =3.0.3, =3.0.11 Source cves: CVE-2023-25617 Source advisory: OSV:GHSA-XXHH-59GH-6FFX...

sap-ai-sdk-core (>=3.0.3, <=3.0.11) potentially affected by CVE-2023-25617 via sap-ai-sdk-base (>=3.1.2, <=3.1.6)

sap-ai-sdk-base PYPI version =3.1.2, =3.0.3, =3.0.11 Source cves: CVE-2023-25617 Source advisory: GHSA-XXHH-59GH-6FFX...

sap-ai-sdk-core (3.0.3) potentially affected by CVE-2023-25617 via sap-ai-sdk-base (3.1.2)

sap-ai-sdk-base PYPI version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sap-ai-sdk-base and may be impacted: - sap-ai-sdk-core 3.0.3 Source cves: CVE-2023-25617 Source advisory: OSV:PYSEC-2023-315...

sap-ai-sdk-core (>=3.0.8, <=3.0.10) potentially affected by CVE-2023-25617 via sap-ai-sdk-base (3.1.3)

sap-ai-sdk-base PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on sap-ai-sdk-base and may be impacted: - sap-ai-sdk-core =3.0.8, =3.0.10 Source cves: CVE-2023-25617 Source advisory: OSV:PYSEC-2023-315...

sap-ai-sdk-core (3.0.11) potentially affected by CVE-2023-25617 via sap-ai-sdk-base (3.1.6)

sap-ai-sdk-base PYPI version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on sap-ai-sdk-base and may be impacted: - sap-ai-sdk-core 3.0.11 Source cves: CVE-2023-25617 Source advisory: OSV:PYSEC-2023-315...

agent-memory-layer (>=0.1.0, <=0.1.1), hana-ai (>=1.0.25122300, <=1.1.26072400) +2 more potentially affected by CVE-2023-25617 via sap-ai-sdk-base (3.4.0)

sap-ai-sdk-base PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sap-ai-sdk-base and may be impacted: - agent-memory-layer =0.1.0, =1.0.25122300, =3.1.0, =5.3.4, =7.4.1 Source cves: CVE-2023-25617 Source advisory: OSV:PYSEC-2023-315...

Security Bulletin: A vulnerability (CVE-2022-21299) in IBM Java Runtime affects CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition

Summary IBM® Runtime Environment Java™ Versions 7.0, 7.1 and 8.0 is used by CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition. The fix removes vulnerability CVE-2022-21299 that could allow an unauthenticated attacker to cause a denial of service. Vulnerabili...

SQL Injection

jeecg-boot-base-core is vulnerable to SQL Injection. The vulnerability is due to improper SQL sanitization in the building block report component, allowing an authenticated attacker to inject and execute malicious SQL queries, leading to Sensitive Information Disclosure...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-igpacks (>=4.0.0, <=4.0.1) +6 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-converter (>=4.0.0, <=4.0.1) +7 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.3), ca.uhn.hapi.fhir:hapi-fhir-converter (4.0.3) +8 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (4.0.3)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.3 - ca.uhn.hapi.fhir:hapi-fhir-converter...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-igpacks (>=4.0.0, <=4.0.1) +15 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0...

Intel® Quartus® Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00632.html...

Security Bulletin: IBM Liberty for Java for IBM Cloud is vulnerable to server-side request forgery due to Apache CXF (CVE-2022-46364)

Summary There is a vulnerability in the Apache CXF library used by IBM Liberty for Java for IBM Cloud with the jaxws-2.2 feature enabled. This has been addressed. Vulnerability Details CVEID:CVE-2022-46364 DESCRIPTION: Apache CXF is vulnerable to server-side request forgery, caused by a flaw in...