ai.tock:tock-shared (>=19.9.4, <=25.3.0), ar.com.fdvs:dynamicjasper (>=5.1.2, <=7.0.0) +1671 more potentially affected by CVE-2021-29425 via commons-io:commons-io (1.3.1)

commons-io:commons-io MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on commons-io:commons-io and may be impacted: - ai.tock:tock-shared =19.9.4, =5.1.2, =1.0.0, =1.10.2, =1.13.0, =0.1.1, =0.5.0, =0.11.1, =0.0.2, =0.2.1 -...

ca.ace-design-lab:island-arena (3.0), ca.ace-design-lab:island-engine (3.0) +386 more potentially affected by CVE-2021-29425 via commons-io:commons-io (1.1)

commons-io:commons-io MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on commons-io:commons-io and may be impacted: - ca.ace-design-lab:island-arena 3.0 - ca.ace-design-lab:island-engine 3.0 - ca.ace-design-lab:island-runner 3.0 -...

com.closure-sys:freezedry (>=0.2.9, <=0.3.1) potentially affected by CVE-2021-29425 via org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-io (1.4_3)

org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-io MAVEN version 1.43 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-io and may be impacted: -...

SUSE-SU-2021:1315-1 Security update for apache-commons-io

This update for apache-commons-io fixes the following issues: - CVE-2021-29425: Limited path traversal when invoking the method FileNameUtils.normalize with an improper input string bsc1184755...

SUSE: Security Advisory (SUSE-SU-2021:1315-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for apache-commons-io (openSUSE-SU-2021:0605-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:0605-1 Security update for apache-commons-io

This update for apache-commons-io fixes the following issues: - CVE-2021-29425: Limited path traversal when invoking the method FileNameUtils.normalize with an improper input string bsc1184755 This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for apache-commons-io (moderate)

openSUSE Security Update: Security update for apache-commons-io Announcement ID: openSUSE-SU-2021:0605-1 Rating: moderate References: 1184755 Cross-References: CVE-2021-29425 CVSS scores: CVE-2021-29425 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2021-29425 SUSE: 4.3...

Apache Commons IO Path Traversal Vulnerability

Apache Commons IO is an application from the American Apache Foundation Apache Inc. It can help develop IO functionality. A path traversal vulnerability exists in Apache Commons IO versions 2.2 through 2.6. The vulnerability is related to the FileNameUtils.normalize method. An attacker can exploi...

SUSE-SU-2021:1282-1 Security update for apache-commons-io

This update for apache-commons-io fixes the following issues: - CVE-2021-29425: Limited path traversal when invoking the method FileNameUtils.normalize with an improper input string bsc1184755...

PT-2021-8008 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the KVM Kernel-based Virtual Machine subsystem in the Linux kernel. It involves a problem with the kvm io bus unregister dev function, which can lead to a delet...

PT-2024-11062 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the io uring feature in the Linux kernel, where the function io uring cancel sqpoll is intended to cancel all requests of a specified context. However, it uses...

PT-2024-11070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between a task aborting a transaction during a commit, a task doing an fsync, and the transaction kthread, leading to a use-after-free of the log root tree. This...

EIPStackGroup OpENer EtherNet/IP Denial of Service Vulnerability

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stacking capabilities to IO adapter devices .A security vulnerability exists in EIPStackGroup OpENer Ethernet/IP that can be exploited by attackers to send specially crafted packets that could result ...

GO-2020-0004 Authentication bypass in github.com/nanobox-io/golang-nanoauth

If any of the ListenAndServe functions are called with an empty token, token authentication is disabled globally for all listeners. Also, a minor timing side channel was present allowing attackers with very low latency and able to make many requests to potentially recover the token...

CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

DEBIAN-CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...