org.ocpsoft.rewrite:rewrite-distribution (>=2.0.0.alpha2, <=2.0.0.alpha6), org.ocpsoft.rewrite:rewrite-transform-markup (>=1.1.0.final, <=2.0.0.alpha6) potentially affected by CVE-2018-1000078 via org.jruby:jruby-stdlib (1.6.7.2)

org.jruby:jruby-stdlib MAVEN version 1.6.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite:rewrite-distribution =2.0.0.alpha2, =1.1.0.final, =2.0.0.alpha6 Source cves: CVE-2018-1000078...

YieldManger swap highly vulnerable to sandwich attacks

Lines of code Vulnerability details Impact Swap slippage of 5% allows malicious parties sandwich attack distributeYield swaps Proof of Concept Swap slippage of 5% allows significant extraction of funds from swaps via sandwich attack. The worst offender of this is the stable-stable swaps which...

org.ocpsoft.rewrite.showcase:rewrite-showcase-transform (2.0.0.beta1), org.ocpsoft.rewrite:rewrite-distribution (2.0.0.beta1) +1 more potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (1.6.8)

org.jruby:jruby-stdlib MAVEN version 1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite.showcase:rewrite-showcase-transform 2.0.0.beta1 - org.ocpsoft.rewrite:rewrite-distribution...

org.ocpsoft.rewrite:rewrite-distribution (>=2.0.0.alpha2, <=2.0.0.alpha6), org.ocpsoft.rewrite:rewrite-transform-markup (>=1.1.0.final, <=2.0.0.alpha6) potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (1.6.7.2)

org.jruby:jruby-stdlib MAVEN version 1.6.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite:rewrite-distribution =2.0.0.alpha2, =1.1.0.final, =2.0.0.alpha6 Source cves: CVE-2018-1000075...

org.infinispan:infinispan-distribution (7.0.0.final), org.infinispan:infinispan-remote-query-server (7.0.0.final) +5 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (7.0.0.final)

org.infinispan:infinispan-server-core MAVEN version 7.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan:infinispan-distribution 7.0.0.final -...

org.infinispan:infinispan-distribution (7.1.0.final), org.infinispan:infinispan-remote-query-server (7.1.0.final) +5 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (7.1.0.final)

org.infinispan:infinispan-server-core MAVEN version 7.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan:infinispan-distribution 7.1.0.final -...

org.infinispan:infinispan-distribution (7.2.0.beta1), org.infinispan:infinispan-remote-query-server (7.2.0.beta1) +5 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (7.2.0.beta1)

org.infinispan:infinispan-server-core MAVEN version 7.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan:infinispan-distribution 7.2.0.beta1 -...

org.infinispan:infinispan-distribution (7.2.0.beta2), org.infinispan:infinispan-remote-query-server (7.2.0.beta2) +5 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (7.2.0.beta2)

org.infinispan:infinispan-server-core MAVEN version 7.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan:infinispan-distribution 7.2.0.beta2 -...

org.infinispan.server:infinispan-server-feature-pack (8.2.3.final), org.infinispan.server:infinispan-server-infinispan (8.2.3.final) +9 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (8.2.3.final)

org.infinispan:infinispan-server-core MAVEN version 8.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.2.3.final -...

org.infinispan:infinispan-distribution (7.0.0.cr1), org.infinispan:infinispan-remote-query-server (7.0.0.cr1) +5 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (7.0.0.cr1)

org.infinispan:infinispan-server-core MAVEN version 7.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan:infinispan-distribution 7.0.0.cr1 -...

org.infinispan:infinispan-distribution (7.1.1.final), org.infinispan:infinispan-remote-query-server (7.1.1.final) +5 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (7.1.1.final)

org.infinispan:infinispan-server-core MAVEN version 7.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan:infinispan-distribution 7.1.1.final -...

org.infinispan:infinispan-distribution (7.2.0.cr1), org.infinispan:infinispan-remote-query-server (7.2.0.cr1) +5 more potentially affected by CVE-2017-2638 via org.infinispan:infinispan-server-core (7.2.0.cr1)

org.infinispan:infinispan-server-core MAVEN version 7.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-core and may be impacted: - org.infinispan:infinispan-distribution 7.2.0.cr1 -...

org.elasticsearch.distribution.deb:elasticsearch (2.0.0-beta2), org.elasticsearch.distribution.rpm:elasticsearch (2.0.0-beta2) +24 more potentially affected by CVE-2018-3824 via org.elasticsearch:elasticsearch (2.0.0-beta2)

org.elasticsearch:elasticsearch MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.distribution.deb:elasticsearch 2.0.0-beta2 -...

org.ocpsoft.rewrite.showcase:rewrite-showcase-transform (2.0.0.beta1), org.ocpsoft.rewrite:rewrite-distribution (2.0.0.beta1) +1 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.6.8)

org.jruby:jruby-stdlib MAVEN version 1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite.showcase:rewrite-showcase-transform 2.0.0.beta1 - org.ocpsoft.rewrite:rewrite-distribution...

org.ocpsoft.rewrite:rewrite-distribution (>=2.0.0.alpha2, <=2.0.0.alpha6), org.ocpsoft.rewrite:rewrite-transform-markup (>=1.1.0.final, <=2.0.0.alpha6) potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.6.7.2)

org.jruby:jruby-stdlib MAVEN version 1.6.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.ocpsoft.rewrite:rewrite-distribution =2.0.0.alpha2, =1.1.0.final, =2.0.0.alpha6 Source cves: CVE-2018-1000073...

Docker Registry has Allocation of Resources Without Limits or Throttling

Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service memory consumption via the manifest endpoint. Specific Go Packages Affected...

Anaconda3 operating system command injection vulnerability

Anaconda3 is a distribution of the Python and R programming languages for scientific computing data science, machine learning applications, large-scale data processing, predictive analytics, etc. from the American company Anaconda. It is dedicated to simplifying package management systems and...

Kerberos KDC Privilege Escalation

The vulnerability of the Kerberos KDC component of the Active Directory catalog service on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

[SECURITY] [DSA 5134-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5134-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 12, 2022 https://www.debian.org/security/faq -...

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

Exploit Title: Apache CouchDB 3.2.1 - Remote Code Execution RCE Date: 2022-01-21 Exploit Author: Konstantin Burov, @sadshade Software Link: https://couchdb.apache.org/ Version: 3.2.1 and below Tested on: Kali 2021.2 Based on 1F98D's Erlang Cookie - Remote Code Execution Shodan: port:4369 "name...