com.google.guava:guava-testlib (23.2-android), com.google.zxing:zxingorg (3.3.1) +1 more potentially affected by CVE-2020-8908 via com.google.guava:guava (23.2-android)

com.google.guava:guava MAVEN version 23.2-android is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - com.google.guava:guava-testlib 23.2-android - com.google.zxing:zxingorg 3.3.1 -...

cn.ximcloud.homekit:ximcloud-homekit-starter (1.0.11), com.coreoz:plume-db (>=1.1.0, <=1.1.1) +1122 more potentially affected by CVE-2020-8908 via com.google.guava:guava (23.3-jre)

com.google.guava:guava MAVEN version 23.3-jre is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - cn.ximcloud.homekit:ximcloud-homekit-starter 1.0.11 - com.coreoz:plume-db =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.8,...

ai.h2o:h2o-persist-gcs (>=3.32.1.6, <=3.36.0.4), ai.h2o:sparkling-water-core_2.11 (>=3.32.1.6-1-2.1, <=3.36.0.4-1-2.4) +1678 more potentially affected by CVE-2020-8908 via com.google.guava:guava (30.1.1-android)

com.google.guava:guava MAVEN version 30.1.1-android is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ai.h2o:h2o-persist-gcs =3.32.1.6, =3.32.1.6-1-2.1, =3.32.1.6-1-3.0, =3.34.0.3-1-3.1, =3.34.0.3-1-2.2,...

GHSA-5MG8-W23W-74H3 Information Disclosure in Guava

A temp directory creation vulnerability exists in Guava prior to version 32.0.0 allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava com.google.common.io.Files.createTempDir. The permissions granted to the directory created defau...

ai.stainless:grails-tika (0.1.0), ai.tock:bot-test (19.9.0) +2731 more potentially affected by CVE-2020-8908 via com.google.guava:guava (28.0-jre)

com.google.guava:guava MAVEN version 28.0-jre is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ai.stainless:grails-tika 0.1.0 - ai.tock:bot-test 19.9.0 - ai.tock:bot-test-base 19.9.0 - ai.tock:bot-toolkit...

com.arize:arize-api-client (>=0.0.1-alpha.15, <=2.0.1), com.clouway.testing.datastore:cloud-datastore-testing (0.0.1) +303 more potentially affected by CVE-2020-8908 via com.google.guava:guava (28.0-android)

com.google.guava:guava MAVEN version 28.0-android is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - com.arize:arize-api-client =0.0.1-alpha.15, =0.0.1, =1.1.12, =1.1.12, =1.0.73, =1.1.12, =1.1.12, =0.1.2,...

ai.h2o:h2o-persist-gcs (>=3.36.1.1, <=3.38.0.3), ai.h2o:sparkling-water-core_2.11 (>=3.36.1.1-1-2.2, <=3.38.0.3-1-2.4) +8589 more potentially affected by CVE-2020-8908 via com.google.guava:guava (31.0.1-jre)

com.google.guava:guava MAVEN version 31.0.1-jre is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ai.h2o:h2o-persist-gcs =3.36.1.1, =3.36.1.1-1-2.2, =3.36.1.1-1-3.0, =3.36.1.1-1-3.1, =3.36.1.1-1-2.2,...

com.google.guava:guava-gwt (18.0-rc2), com.google.guava:guava-testlib (18.0-rc2) potentially affected by CVE-2020-8908 via com.google.guava:guava (18.0-rc2)

com.google.guava:guava MAVEN version 18.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - com.google.guava:guava-gwt 18.0-rc2 - com.google.guava:guava-testlib 18.0-rc2 Source cves: CVE-2020-8908 Source...

com.cedarsoft.unit:utils (1.0), com.google.guava:guava-gwt (13.0-rc2) +8 more potentially affected by CVE-2020-8908 via com.google.guava:guava (13.0-rc2)

com.google.guava:guava MAVEN version 13.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - com.cedarsoft.unit:utils 1.0 - com.google.guava:guava-gwt 13.0-rc2 - com.thousandmemories.photon:photon-core 0.1...

ai.hyacinth.framework:core-service-admin-server (0.5.24), ai.hyacinth.framework:core-service-api-support (>=0.5.0, <=0.5.24) +938 more potentially affected by CVE-2020-8908 via com.google.guava:guava (16.0)

com.google.guava:guava MAVEN version 16.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ai.hyacinth.framework:core-service-admin-server 0.5.24 - ai.hyacinth.framework:core-service-api-support =0.5.0,...

ae.teletronics.nlp:w2vec (1.0), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +3750 more potentially affected by CVE-2020-8908 via com.google.guava:guava (11.0.2)

com.google.guava:guava MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ae.teletronics.nlp:w2vec 1.0 - ai.chronon:aggregator2.12 =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.2,...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), at.iem:lucrematrix-core_2.10 (>=1.0.0, <=1.3.0) +3382 more potentially affected by CVE-2020-8908 via com.google.guava:guava (17.0)

com.google.guava:guava MAVEN version 17.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin =1.0.1, =1.0.0, =1.0.0, =1.0.1, =1.0.0,...

com.google.guava:guava-gwt (15.0-rc1), com.google.guava:guava-testlib (15.0-rc1) +20 more potentially affected by CVE-2020-8908 via com.google.guava:guava (15.0-rc1)

com.google.guava:guava MAVEN version 15.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - com.google.guava:guava-gwt 15.0-rc1 - com.google.guava:guava-testlib 15.0-rc1 -...

com.google.guava:guava-gwt (22.0-rc1), com.google.guava:guava-testlib (22.0-rc1) +12 more potentially affected by CVE-2020-8908 via com.google.guava:guava (22.0-rc1)

com.google.guava:guava MAVEN version 22.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - com.google.guava:guava-gwt 22.0-rc1 - com.google.guava:guava-testlib 22.0-rc1 - com.hack23.cia:jms-broker...

au.net.causal.maven.plugins:boxdb-maven-plugin (>=2.4, <=3.1), com.accenture.atom:library-conversion2jmx (0.0.1) +80 more potentially affected by CVE-2020-8908 via com.google.guava:guava (23.0-android)

com.google.guava:guava MAVEN version 23.0-android is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - au.net.causal.maven.plugins:boxdb-maven-plugin =2.4, =0.2.8, =0.2.8, =0.5.0, =2.8.8, =0.2.2, =5.2.3.67,...

br.com.tecsinapse:glimpse-server (>=1.1.1, <=1.1.2), cc.factorie:factorie_2.11 (1.2) +1129 more potentially affected by CVE-2020-8908 via com.google.guava:guava (12.0)

com.google.guava:guava MAVEN version 12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - br.com.tecsinapse:glimpse-server =1.1.1, =2.0.4, =1.5, =0.5.0, =0.5.1 - com.data-artisans:flakka-contrib2.10...

ai.databand.azkaban:azkaban-common (3.18.0), ai.databand.azkaban:azkaban-exec-server (3.18.0) +2457 more potentially affected by CVE-2020-8908 via com.google.guava:guava (13.0.1)

com.google.guava:guava MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ai.databand.azkaban:azkaban-common 3.18.0 - ai.databand.azkaban:azkaban-exec-server 3.18.0 -...

guava: local information disclosure via temporary directory created with unsafe permissions

A flaw was found in Guava that creates temporary directories with default permissions similar to /tmp. This issue may allow local users access, possibly permitting information exposure...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update

A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.3.6 (RHSA-2021:0872)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0872 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...