org.infinispan.server:infinispan-server-feature-pack (8.1.4.final), org.infinispan.server:infinispan-server-infinispan (8.1.4.final) +33 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.1.4.final)

org.infinispan:infinispan-core MAVEN version 8.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.4.final -...

org.infinispan:infinispan-as-embedded-modules (7.0.0.cr1), org.infinispan:infinispan-cachestore-jdbc (7.0.0.cr1) +25 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (7.0.0.cr1)

org.infinispan:infinispan-core MAVEN version 7.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.0.0.cr1 -...

com.geeoz.atom:atom-api_2.11 (>=0.1.0, <=0.3.0), com.geeoz.atom:atom-kie_2.11 (>=0.1.0, <=0.3.0) +54 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (7.2.0.final)

org.infinispan:infinispan-core MAVEN version 7.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.geeoz.atom:atom-api2.11 =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.9.0,...

org.infinispan.server:infinispan-server-feature-pack (8.1.8.final), org.infinispan.server:infinispan-server-infinispan (8.1.8.final) +35 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.1.8.final)

org.infinispan:infinispan-core MAVEN version 8.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.8.final -...

org.infinispan:infinispan-as-embedded-modules (7.2.0.cr1), org.infinispan:infinispan-atomic-factory (7.2.0.cr1) +29 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (7.2.0.cr1)

org.infinispan:infinispan-core MAVEN version 7.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.2.0.cr1 -...

org.hibernate:hibernate-infinispan (>=5.0.0.beta1, <=5.0.0.beta2), org.infinispan:infinispan-as-embedded-modules (7.1.0.final) +27 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (7.1.0.final)

org.infinispan:infinispan-core MAVEN version 7.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-infinispan =5.0.0.beta1, =5.0.0.beta2 -...

org.infinispan.server:infinispan-server-feature-pack (8.1.0.beta1), org.infinispan.server:infinispan-server-infinispan (8.1.0.beta1) +32 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (8.1.0.beta1)

org.infinispan:infinispan-core MAVEN version 8.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.0.beta1 -...

com.geeoz.atom:atom-api_2.11 (>=0.1.0, <=0.3.0), com.geeoz.atom:atom-kie_2.11 (>=0.1.0, <=0.3.0) +54 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (7.2.0.final)

org.infinispan:infinispan-core MAVEN version 7.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.geeoz.atom:atom-api2.11 =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.9.0,...

org.infinispan.server:infinispan-server-feature-pack (8.1.7.final), org.infinispan.server:infinispan-server-infinispan (8.1.7.final) +33 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (8.1.7.final)

org.infinispan:infinispan-core MAVEN version 8.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.7.final -...

io.apiman:apiman-gateway-engine-ispn (1.2.2.final), io.apiman:apiman-manager-api-ispn (1.2.2.final) +35 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (8.1.1.final)

org.infinispan:infinispan-core MAVEN version 8.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - io.apiman:apiman-gateway-engine-ispn 1.2.2.final - io.apiman:apiman-manager-api-ispn...

Craft CMS PHP Code Injection Vulnerability

Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the "Assets-Upload files" screen and then the "Replace it" option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension...

io.undertow:undertow-servlet (1.0.0.cr5), io.undertow:undertow-websockets-jsr (1.0.0.cr5) +2 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.0.cr5)

io.undertow:undertow-core MAVEN version 1.0.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr5 - io.undertow:undertow-websockets-jsr 1.0.0.cr5 -...

Cesanta MJS has an unspecified vulnerability (CNVD-2022-77023)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...

Adobe InDesign < 16.4.2 / 17.0 < 17.2.0 Multiple Arbitrary code execution (APSB22-23)

The version of Adobe InDesign installed on the remote Windows host is prior to 16.4.2, 17.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-23 advisory. - Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write...

Qualcomm Embedded Kernel Code Execution

The vulnerability of microprogramming software in embedded Qualcomm chips relates to synchronization errors when using common resources. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

CVE-2022-23166

Sysaid – Sysaid Local File Inclusion LFI – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in the "Insert/Edit Embedded Media" window Choose Type : iFrame and File/URL : here is the LFI Solution: Update to 22.2.20 cloud version, or to...

CVE-2022-23166

Sysaid – Sysaid Local File Inclusion LFI – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in the "Insert/Edit Embedded Media" window Choose Type : iFrame and File/URL : here is the LFI Solution: Update to 22.2.20 cloud version, or to...

CVE-2022-23166: Improper Limitation of a Pathname to a Restricted Directory

Sysaid – Sysaid Local File Inclusion LFI – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in the "Insert/Edit Embedded Media" window Choose Type : iFrame and File/URL : here is the LFI Solution: Update to 22.2.20 cloud version, or to...

CVE-2022-27794

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execution in the context of the current user...

Code injection

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execution in the context of the current user...