au.csiro.aehrc.variant-spark:variant-spark_2.11 (0.1.0), bio.ferlab:datalake-commons_2.12 (>=0.1.0, <=13.0.0) +258 more potentially affected by CVE-2022-21126 via com.github.samtools:htsjdk (>=1.128, <=3.0.0)

com.github.samtools:htsjdk MAVEN version =1.128, =0.1.0, =0.0.1, =0.0.21, =0.1.0, =0.1.0, =0.0.26, =0.1.0, =0.1.3, =1.0.0, =0.1.0, =0.1.3, =1.0.0, =0.1.0, =0.1.3, =0.3.0 and more Source cves: CVE-2022-21126 Source advisory: MEND:CVE-2022-21126...

Debian: Security Advisory (DSA-5290-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to remote code execution due to Apache Commons Text [CVE-2022-42889]

Summary IBM Sterling Connect:Direct for UNIX components Install Agent and File Agent are vulnerable to remote code execution due to Apache Commons Text CVE-2022-42889. Apache Commons Text has been upgraded to version 1.10.0 in IBM Sterling Connect:Direct for UNIX Install Agent and File Agent...

apache-commons-configuration: Apache Commons Configuration insecure interpolation defaults

A flaw was found in Apache Commons Configuration's variable interpolation, which by default included several lookup actions that could permit script invocation on remote servers. This issue could allow an attacker to use one of these actions to send a request to execute arbitrary code on the serv...

Important: Red Hat Security Advisory: Red Hat Fuse 7.11.1 release and security update

A minor version update from 7.11 to 7.11.1 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

Security Bulletin: IBM UrbanCode Deploy (UCD) Agents on zOS are vulnerable to an arbitrary code execution due to use of Apache Commons Text [CVE-2022-42889]

Summary The zos toolkit installed with agents on zOS includes Apache Commons Text which could allow an attacker to execute arbitrary code on the system, caused by an insecure interpolation defaults flaw. By sending a specially-crafted input, an attacker could exploit this vulnerability to execute...

[SECURITY] [DSA 5290-1] commons-configuration2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5290-1 [email protected] https://www.debian.org/security/ Markus Koschany November 28, 2022 https://www.debian.org/security/faq -...

Security Bulletin: Apache Commons Text and Apache Commons Configuration vulnerabilities affects IBM Operations Analytics Predictive Insights [CVE-2022-42889, CVE-2022-33980]

Summary Apache Commons Text and Apache Commons Configuration vulnerabilities affects IBM Operations Analytics Predictive Insights CVE-2022-42889, CVE-2022-33980. Apache Commons Text and Apache Commons Configuration is used by IBM Operations Analytics Predictive Insight REST Mediation Service, par...

DSA-5290-1 commons-configuration2 - security update

Bulletin has no description...

Debian DSA-5290-1 : commons-configuration2 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5290 advisory. - Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is...

apache-commons-jxpath:JXPathFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5918039399071744 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Apache Commons Configuration 2.4 - 2.7 RCE Vulnerability

The Apache Commons Configuration library is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2022-36787 · Apache · Apache Commons Imaging

Name of the Vulnerable Software and Affected Versions: Apache Commons Imaging affected versions not specified Description: A security exception occurs in the java.desktop/java.awt.image.DataBufferInt and java.desktop/java.awt.image.Raster.createPackedRaster functions, which are called by the...

Apache Commons Text 1.5 - 1.9 RCE Vulnerability (Text4Shell)

The Apache Commons Text library is prone to a remote code execution RCE vulnerability dubbed SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

apache-commons-imaging:ImagingJpegFuzzer: Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=4885302936469504 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingJpegFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Apache Commons Detection Consolidation

Consolidation of Apache Commons and its components detections. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Apache Commons Detection (Linux/Unix SSH Login)

SSH login-based detection of Apache Commons and its components. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

apache-commons-imaging:ImagingGifFuzzer: Security exception in java.base/java.io.ByteArrayOutputStream.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5867734521217024 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingGifFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-imaging:ImagingBmpFuzzer: Security exception in org.apache.commons.imaging.common.ImageBuilder.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5649300806041600 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingBmpFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...