Security Bulletin: Apache Commons Collections library in WebSphere Application Server Knowledge Center is vulnerable (CVE-2015-7450)

Summary The Knowledge Center Component used in Version 9 of the WebSphere Application Server needs an updated Apache Commons Collections library. Vulnerability Details CVEID:CVE-2015-7450 DESCRIPTION: Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT...

CVE-2024-57986 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections A report in 2019 by the syzbot fuzzer was found to be connected to two errors in the HID core associated with Resolution Multipliers. One of the...

CVE-2024-57986

CVE-2024-57986 affects the Linux kernel HID core: Resolution Multiplier handling assumes valid Logical Collections and may set multiplier_collection to NULL, enabling a potential flaw. The issue was only partially fixed previously; the remaining case (none of the found collections being a Logical...

CVE-2024-43131

Incorrect Authorization vulnerability in WPWeb Docket WooCommerce Collections / Wishlist / Watchlist allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...

Security Bulletin: Vulnerabilities in Apache Commons Collections, Apache Synapse, Oracle WebLogic Server, MuleSoft and Red Hat JBoss might affect IBM Storage Copy Data Management.

Summary IBM Storage Copy Data Management can be affected by vulnerabilities in Apache Commons Colections, Apache Synapse, Oracle WebLogic Server, MuleSoft and Red Hat JBoss. Vulnerabilities include an attacker could exploit these vulnerabilities to execute arbitrary code on the system, allow remo...

Malicious code in com.unity.collections (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261ab2743232ff1e6c05ececf67a115acadf196fe4994bda33c1da81b933ac67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.querydsl:querydsl-collections (4.1.0), com.querydsl:querydsl-hibernate-search (4.1.0) +9 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.1.0)

com.querydsl:querydsl-apt MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.1.0 - com.querydsl:querydsl-hibernate-search 4.1.0 -...

com.querydsl:querydsl-collections (4.0.9), com.querydsl:querydsl-hibernate-search (4.0.9) +6 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.9)

com.querydsl:querydsl-apt MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.0.9 - com.querydsl:querydsl-hibernate-search 4.0.9 -...

com.querydsl.contrib:querydsl-dynamodb (4.0.8), com.querydsl.contrib:querydsl-elasticsearch (4.0.8) +9 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.8)

com.querydsl:querydsl-apt MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl.contrib:querydsl-dynamodb 4.0.8 - com.querydsl.contrib:querydsl-elasticsearch 4.0.8 -...

com.querydsl.contrib:querydsl-dynamodb (4.0.4), com.querydsl.contrib:querydsl-elasticsearch (4.0.4) +9 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.4)

com.querydsl:querydsl-apt MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl.contrib:querydsl-dynamodb 4.0.4 - com.querydsl.contrib:querydsl-elasticsearch 4.0.4 -...

com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (1.2.0), com.idontchop:spring-data-querydsl-value-operators (>=0.0.3, <=0.2.0) +4 more potentially affected by CVE-2024-49203 via io.github.openfeign.querydsl:querydsl-apt (>=6.0.0.m1, <=6.10)

io.github.openfeign.querydsl:querydsl-apt MAVEN version =6.0.0.m1, =0.0.3, =6.0.0.m1, =6.0.0.m1, =6.0.0.m2, =6.0.0.m1, =6.10 Source cves: CVE-2024-49203 Source advisory: GHSA-6Q3Q-6V5J-H6VG...

com.querydsl:querydsl-collections (4.2.0), com.querydsl:querydsl-hibernate-search (4.2.0) +6 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.2.0)

com.querydsl:querydsl-apt MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.2.0 - com.querydsl:querydsl-hibernate-search 4.2.0 -...

com.querydsl:querydsl-collections (4.0.0), com.querydsl:querydsl-hibernate-search (4.0.0) +5 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.0)

com.querydsl:querydsl-apt MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.0.0 - com.querydsl:querydsl-hibernate-search 4.0.0 -...

com.querydsl:querydsl-collections (4.1.2), com.querydsl:querydsl-hibernate-search (4.1.2) +9 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.1.2)

com.querydsl:querydsl-apt MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.1.2 - com.querydsl:querydsl-hibernate-search 4.1.2 -...

com.querydsl:querydsl-collections (4.0.1), com.querydsl:querydsl-hibernate-search (4.0.1) +5 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.1)

com.querydsl:querydsl-apt MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.0.1 - com.querydsl:querydsl-hibernate-search 4.0.1 -...

com.querydsl:querydsl-collections (4.0.6), com.querydsl:querydsl-hibernate-search (4.0.6) +6 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.6)

com.querydsl:querydsl-apt MAVEN version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.0.6 - com.querydsl:querydsl-hibernate-search 4.0.6 -...

com.querydsl:querydsl-collections (4.0.7), com.querydsl:querydsl-hibernate-search (4.0.7) +6 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.7)

com.querydsl:querydsl-apt MAVEN version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.0.7 - com.querydsl:querydsl-hibernate-search 4.0.7 -...

io.github.openfeign.querydsl:querydsl-collections (>=5.0.1, <=5.6), io.github.openfeign.querydsl:querydsl-hibernate-search (>=5.0.1, <=5.6) +6 more potentially affected by CVE-2024-49203 via io.github.openfeign.querydsl:querydsl-apt (>=5.0.1, <=5.6)

io.github.openfeign.querydsl:querydsl-apt MAVEN version =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.6 Source cves: CVE-2024-49203 Source advisory: OSV:GHSA-6Q3Q-6V5J-H6VG...

com.querydsl:querydsl-collections (4.0.3), com.querydsl:querydsl-hibernate-search (4.0.3) +6 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.3)

com.querydsl:querydsl-apt MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.0.3 - com.querydsl:querydsl-hibernate-search 4.0.3 -...

com.querydsl:querydsl-collections (4.0.5), com.querydsl:querydsl-hibernate-search (4.0.5) +6 more potentially affected by CVE-2024-49203 via com.querydsl:querydsl-apt (4.0.5)

com.querydsl:querydsl-apt MAVEN version 4.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.querydsl:querydsl-apt and may be impacted: - com.querydsl:querydsl-collections 4.0.5 - com.querydsl:querydsl-hibernate-search 4.0.5 -...