SUSE: Security Advisory (SUSE-SU-2022:3142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:3140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:3141-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: Access control error vulnerability

The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor is a vital signs patient monitor from Contec Health. The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor suffers from an Access Control Error vulnerability that originates from a threat actor with transient acce...

Ubuntu: Security Advisory (USN-3458-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-846-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3274-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM DataPower Gateway affected by vulnerabilities in ICU [CVE-2017-14952 and CVE-2020-10531]

Summary These vulnerabilties affect only those customers who have configured a binary transform action using a tx-map. IBM has addressed the CVEs. CVE-2017-14952 and CVE-2020-10531 Vulnerability Details CVEID:CVE-2017-14952 DESCRIPTION: International Components for Unicode ICU for C/C++ could all...

Node.js: Insecure loading of ICU data through ICU_DATA environment variable

Insecure loading of ICU data through the ICUDATA environment variable allowed for potential exploitation, as ICU still honored the variable regardless of privilege level. The impact was likely limited, but it was suggested to build ICU with ICUNOUSERDATAOVERRIDE defined and sanitize the environme...

org.elasticsearch:elasticsearch-analysis-icu (0.13.0), org.elasticsearch:elasticsearch-cloud-aws (0.13.0) +10 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.13.0)

org.elasticsearch:elasticsearch MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.13.0 - org.elasticsearch:elasticsearch-cloud-aws...

com.floragunn:search-guard-ssl (5.0.0-alpha3-10a), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha3) +22 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (5.0.0-alpha3)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-ssl 5.0.0-alpha3-10a - org.elasticsearch.plugin:analysis-icu...

org.elasticsearch:elasticsearch-analysis-icu (0.18.1), org.elasticsearch:elasticsearch-cloud-aws (0.18.1) +11 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.18.1)

org.elasticsearch:elasticsearch MAVEN version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.11.0), org.elasticsearch:elasticsearch-cloud-aws (0.11.0) +7 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.11.0)

org.elasticsearch:elasticsearch MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.11.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.15.0), org.elasticsearch:elasticsearch-cloud-aws (0.15.0) +11 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.15.0)

org.elasticsearch:elasticsearch MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.15.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.7.0), org.elasticsearch:elasticsearch-client-groovy (0.7.0) +3 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.7.0)

org.elasticsearch:elasticsearch MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.14.0), org.elasticsearch:elasticsearch-cloud-aws (0.14.0) +10 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.14.0)

org.elasticsearch:elasticsearch MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.2), org.elasticsearch:elasticsearch-cloud-aws (0.14.2) +10 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.14.2)

org.elasticsearch:elasticsearch MAVEN version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.18.1), org.elasticsearch:elasticsearch-cloud-aws (0.18.1) +11 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.18.1)

org.elasticsearch:elasticsearch MAVEN version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.18.3), org.elasticsearch:elasticsearch-cloud-aws (0.18.3) +11 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.18.3)

org.elasticsearch:elasticsearch MAVEN version 0.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.3 - org.elasticsearch:elasticsearch-cloud-aws...