io.quarkiverse.cxf:quarkus-cxf-deployment (1.4.0), io.quarkiverse.cxf:quarkus-cxf-integration-tests (1.4.0) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.4.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.4.0 - io.quarkiverse.cxf:quarkus-cxf-integration-tests...

io.github.project-openubl:quarkus-xsender (>=4.0.0.beta1, <=4.0.0.beta4), io.github.project-openubl:quarkus-xsender-deployment (>=4.0.0.beta1, <=4.0.0.beta4) +27 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.5.6)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.github.project-openubl:quarkus-xsender =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta4 -...

io.github.project-openubl:quarkus-xsender (>=4.0.0.beta5, <=4.1.1), io.github.project-openubl:quarkus-xsender-deployment (>=4.0.0.beta5, <=4.1.1) +29 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.7.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.github.project-openubl:quarkus-xsender =4.0.0.beta5, =4.0.0.beta5, =4.1.1 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (2.3.0), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (2.3.0) +25 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (2.3.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 2.3.0 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (>=3.8.0, <=3.15.1), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=3.8.0, <=3.15.1) +46 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (>=3.8.0, <=3.15.1)

io.quarkiverse.cxf:quarkus-cxf MAVEN version =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.1, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.15.1 - io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-security-policy-fips 3.8.1 and more Source cves:...

io.quarkiverse.cxf:quarkus-cxf-deployment (2.0.0.cr1), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (2.0.0.cr1) +18 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (2.0.0.cr1)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 2.0.0.cr1 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.5), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.5) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.5)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.5 - io.quarkiverse.cxf:quarkus-cxf-integration-tests 0.5...

io.github.project-openubl:quarkus-xsender (>=4.1.2, <=4.1.7), io.github.project-openubl:quarkus-xsender-deployment (>=4.1.2, <=4.1.7) +29 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.7.3)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.github.project-openubl:quarkus-xsender =4.1.2, =4.1.2, =4.1.7 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.1.1), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.1.1) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.1.1)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.1.1 - io.quarkiverse.cxf:quarkus-cxf-integration-tests...

io.github.project-openubl:quarkus-xsender (>=4.0.0.beta1, <=5.1.1), io.github.project-openubl:quarkus-xsender-deployment (>=4.0.0.beta1, <=5.1.1) +57 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (>=0.1.0, <=3.15.1)

io.quarkiverse.cxf:quarkus-cxf MAVEN version =0.1.0, =4.0.0.beta1, =4.0.0.beta1, =0.1.0, =1.5.0.cr1, =2.7.0.cr1, =3.8.0, =2.2.1, =1.5.0.cr1, =2.2.0, =3.8.1, =1.5.3, =1.5.5, =2.7.0.cr1, =1.5.0.cr1, =3.15.1 and more Source cves: CVE-2024-9621 Source advi...

Storm-1575 Threat Actor Deploys New Login Panels for Phishing Infrastructure

The Storm-1575 group is known for frequently rebranding its phishing infrastructure. Recently, ANY.RUN analysts identified the deployment of…...

Description of the security update for Excel 2016: October 8, 2024 (KB5002643)

None None...

Description of the security update for SharePoint Server Subscription Edition: October 8, 2024 (KB5002649)

None None...

Description of the security update for SharePoint Server 2019: October 8, 2024 (KB5002647)

None None...

Siemens PSS SINCAL

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Qualys VMDR Rated as the Only Leader and Outperformer by Independent Analyst Firm for the Second Consecutive Year

Qualys VMDR received the highest possible scores for risk-based assessment, cloud-native and serverless function scanning, and flexibility of deployment, among 20 vendors evaluated in this report. As the threat landscape evolves, vulnerability management remains a cornerstone of security...

CVE-2024-47616 Pomerium's service account access token may grant unintended access to databroker API

Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state. Requests to the databroker service API are authorized by the presence of a JSON Web Token JWT signed by a key known by all Pomerium servic...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.5), org.jenkins-ci.main:jenkins-test-harness (1.625.2) +6 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.625.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0.1, =1.0.2 Source cves:...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.5), org.jenkins-ci.main:jenkins-test-harness (1.625.2) +6 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.625.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0.1, =1.0.2 Source cves:...

CVE-2024-20432

A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device. This vulnerability is due to improper user authorization and insufficient...