577 matches found
XXE (XML External Entity Injection) org.apache.tika:tika-core Dependency in Bamboo Data Center and Server
This High severity XXE XML External Entity Injection vulnerability was introduced in versions 9.6.1, 10.0.0, 10.1.0, 10.2.0, 11.0.0, and 12.0.0-rc3 of Bamboo Data Center and Server. This XXE XML External Entity Injection vulnerability, with a CVSS Score of 8.4 and a CVSS Vector of...
SSRF (Server-Side Request Forgery) axios Dependency in Bamboo Data Center and Server
This High severity SSRF Server-Side Request Forgery vulnerability was introduced in versions 9.6.1, 10.0.0, 10.1.0, 10.2.0, and 11.0.0 of Bamboo Data Center and Server. This SSRF Server-Side Request Forgery vulnerability, with a CVSS Score of 7.7 and a CVSS Vector of...
DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Bamboo Data Center and Server
This High severity DoS Denial of Service vulnerability was introduced in versions 9.6.1, 10.2.0 of Bamboo Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of: code:java...
XXE (XML External Entity Injection) Tika Dependency Vulnerability in Bamboo Data Center and Server
This Bamboo release includes updates to our Apache Tika dependency in response to CVE-2025-66516. Our security team has assessed that the current scope of this CVE does not present the same critical risk in our products, as our use of the dependency doesn’t support the known path for exploitation...
DoS (Denial of Service) org.apache.tomcat:tomcat-util Dependency Vulnerability in Bamboo Data Center and Server
This High severity DoS Denial of Service vulnerability known as CVE-2025-52434 was introduced in 9.6.1, 9.6.2, 9.6.3, 9.6.4, 9.6.5, 9.6.6, 9.6.7, 9.6.8, 10.2.0, 9.6.9, 9.6.10, 10.2.1, 10.2.2, 10.2.3, 9.6.11, 9.6.12, 10.2.4, 9.6.13, 9.6.14, 10.2.5, 10.2.6, 9.6.15, 10.2.7 of Bamboo Data Center and...
create-bamboo (>=1.0.1, <=1.0.2) potentially affected by unknown CVE via bamboo-init (1.0.7)
bamboo-init NPM version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on bamboo-init and may be impacted: - create-bamboo =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-50934...
Malicious code in bamboo-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913210ebd3bdb67c851e13118eff395e1df72403e313fcedfa4a1e9d4253746b The package bamboo-init was found to contain malicious code...
MAL-2025-50934 Malicious code in bamboo-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913210ebd3bdb67c851e13118eff395e1df72403e313fcedfa4a1e9d4253746b The package bamboo-init was found to contain malicious code...
EUVD-2025-40542
Malicious code in bamboo-init npm...
[SECURITY] Fedora 41 Update: ibus-bamboo-0.8.4~RC6-2.fc41
A Vietnamese IME for IBus using Bamboo Engine. The open source Vietnamese keyboard supports most common encodings, popular Vietnamese typing methods, smart diacritics, spell checking, shortcuts,...
[SECURITY] Fedora 42 Update: ibus-bamboo-0.8.4~RC6-2.fc42
A Vietnamese IME for IBus using Bamboo Engine. The open source Vietnamese keyboard supports most common encodings, popular Vietnamese typing methods, smart diacritics, spell checking, shortcuts,...
Fedora 42 : ibus-bamboo (2025-f07b4f8c0c)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f07b4f8c0c advisory. Rebuild with golang-1.24.7-1.fc42 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 41 : ibus-bamboo (2025-e3f99bf558)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e3f99bf558 advisory. Rebuild with golang-1.24.7-1.fc41 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
EUVD-2017-6090
Malware in sbrugna...
EUVD-2017-9218
Malware in sbrugna...
EUVD-2017-18446
Malware in sbrugna...
EUVD-2014-9563
Malware in sbrugna...
EUVD-2017-17847
Malware in sbrugna...