org.infinispan.server:infinispan-server-feature-pack (9.0.3.final), org.infinispan.server:infinispan-server-infinispan (9.0.3.final) +4 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (9.0.3.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 9.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.0.3.final -...

org.infinispan.server:infinispan-server-feature-pack (9.0.0.cr1), org.infinispan.server:infinispan-server-infinispan (9.0.0.cr1) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (9.0.0.cr1)

org.infinispan:infinispan-client-hotrod MAVEN version 9.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.0.0.cr1 -...

org.infinispan:infinispan-as-embedded-modules (7.2.0.final), org.infinispan:integrationtests-osgi (7.2.0.final) +1 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (7.2.0.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 7.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.2.0.final -...

io.quarkus:quarkus-test-infinispan-client (>=2.6.1.final, <=2.7.3.final), org.infinispan:infinispan-cachestore-jdbc (13.0.5.final) +13 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (13.0.5.final)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version 13.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc-common and may be impacted: - io.quarkus:quarkus-test-infinispan-client =2.6.1.final,...

org.infinispan:infinispan-cachestore-jdbc (13.0.21.final), org.infinispan:infinispan-cachestore-sql (13.0.21.final) +11 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (13.0.21.final)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version 13.0.21.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc-common and may be impacted: - org.infinispan:infinispan-cachestore-jdbc 13.0.21.final...

org.infinispan:infinispan-as-embedded-modules (7.2.0.beta1), org.infinispan:infinispan-distribution (7.2.0.beta1) +1 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (7.2.0.beta1)

org.infinispan:infinispan-cachestore-remote MAVEN version 7.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-remote and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.2.0.beta1 -...

org.infinispan.server:infinispan-server-infinispan (10.0.0.beta3), org.infinispan:infinispan-distribution (10.0.0.beta3) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (10.0.0.beta3)

org.infinispan:infinispan-cachestore-remote MAVEN version 10.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-remote and may be impacted: - org.infinispan.server:infinispan-server-infinispan 10.0.0.beta3 -...

Financially motivated threat actors misusing App Installer

Since mid-November 2023, Microsoft Threat Intelligence has observed threat actors, including financially motivated actors like Storm-0569, Storm-1113, Sangria Tempest, and Storm-1674, utilizing the ms-appinstaller URI scheme App Installer to distribute malware. In addition to ensuring that...

NewStart CGSL MAIN 5.04 : krb5 Multiple Vulnerabilities (NS-SA-2023-0102)

The remote NewStart CGSL host, running version MAIN 5.04, has krb5 packages installed that are affected by multiple vulnerabilities: - The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/dotgsreq.c via a FAST inne...

NewStart CGSL MAIN 5.04 : openssl Vulnerability (NS-SA-2023-0101)

The remote NewStart CGSL host, running version MAIN 5.04, has openssl packages installed that are affected by a vulnerability: - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public...

SUSE SLES15 / openSUSE 15 Security Update : distribution (SUSE-SU-2023:4974-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4974-1 advisory. distribution was updated to 2.8.3 bsc1216491: Pass BUILDTAGS argument to go build Enable Go build tags reference: replace...

SUSE-SU-2023:4974-1 Security update for distribution

This update for distribution fixes the following issues: distribution was updated to 2.8.3 bsc1216491: Pass BUILDTAGS argument to go build Enable Go build tags reference: replace deprecated function SplitHostname Dont parse errors as JSON unless Content-Type is set to JSON update to go 1.20.8 Set...

[SECURITY] Fedora 39 Update: python3.7-3.7.17-4.fc39

Python 3.7 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.7, see other distributions that support it, such as an older Fedora release...

PT-2023-36301 · Unknown · Distribution

Name of the Vulnerable Software and Affected Versions: distribution versions prior to 2.8.3 Description: The issue is related to several problems in the distribution package, including the parsing of errors as JSON, the handling of HTTP request bodies, and the deprecation of certain functions and...

Flatpak: Multiple Vulnerabilities

Background Flatpak is a Linux application sandboxing and distribution framework. Description Multiple vulnerabilities have been discovered in Flatpak. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There ...

Debian: Security Advisory (DSA-5585-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Merge Conflicts PRs in Confluence-Distribution

Merge conflicts PRs in Confluence-Distribution after synchrony update PRs...

CVE-2023-6784

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails...

CVE-2023-6784

Progress Sitefinity (the platform referenced across multiple sources) has a reported input validation error vulnerability associated with CVE-2023-6784 that could enable a malicious user to use the system to distribute phishing emails. The connected documents describe the issue as an input valida...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.1) +7 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (>=2.11.0, <=2.11.1)

org.apache.pulsar:pulsar-websocket MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 Source cves: CVE-2023-37544 Source advisory: GHSA-83Q5-WHQP-R8JR...