org.infinispan.server:infinispan-server-commons (9.4.0.cr2), org.infinispan.server:infinispan-server-event-logger (9.4.0.cr2) +74 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (9.4.0.cr2)

org.infinispan:infinispan-commons MAVEN version 9.4.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-commons 9.4.0.cr2 -...

org.infinispan.server:infinispan-server-commons (8.1.6.final), org.infinispan.server:infinispan-server-feature-pack (8.1.6.final) +46 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (8.1.6.final)

org.infinispan:infinispan-commons MAVEN version 8.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-commons 8.1.6.final -...

org.infinispan.server:infinispan-server-commons (9.2.0.beta2), org.infinispan.server:infinispan-server-event-logger (9.2.0.beta2) +62 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (9.2.0.beta2)

org.infinispan:infinispan-commons MAVEN version 9.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-commons 9.2.0.beta2 -...

SUSE CVE-2012-2377

JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a...

SUSE CVE-2016-2141

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.7.0), org.elasticsearch:elasticsearch-client-groovy (0.7.0) +3 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (0.7.0)

org.elasticsearch:elasticsearch MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.0 - org.elasticsearch:elasticsearch-client-groov...

co.paralleluniverse:galaxy (>=1.1, <=1.2), co.paralleluniverse:quasar-galaxy (0.2.0) +279 more potentially affected by CVE-2013-4112 via org.jgroups:jgroups (>=3.0.0.final, <=3.2.8.final)

org.jgroups:jgroups MAVEN version =3.0.0.final, =1.1, =1.0.7364, =0.13.1, =0.7.3, =0.8.0, =0.6.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =1.0.1 and more Source cves: CVE-2013-4112 Source advisory: GHSA-CC62-496P-HRR7...

org.elasticsearch:elasticsearch-analysis-icu (0.8.0), org.elasticsearch:elasticsearch-client-groovy (0.8.0) +4 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.8.0)

org.elasticsearch:elasticsearch MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.8.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2015-1427 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.7.0), org.elasticsearch:elasticsearch-client-groovy (0.7.0) +3 more potentially affected by CVE-2015-5531 via org.elasticsearch:elasticsearch (0.7.0)

org.elasticsearch:elasticsearch MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2018-3824 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...

Uncontrolled Resource Consumption in Artemis and HornetQ

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...

GHSA-GC96-H5PR-839J Uncontrolled Resource Consumption in Artemis and HornetQ

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...

Improper Input Validation in JGroups

JGroups before 4.0 does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors. Fixes for this issue have been backport...

org.hibernate:hibernate-search-infinispan (3.3.0.final) potentially affected by CVE-2016-2141 via org.jgroups:jgroups (2.10.1.ga)

org.jgroups:jgroups MAVEN version 2.10.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jgroups:jgroups and may be impacted: - org.hibernate:hibernate-search-infinispan 3.3.0.final Source cves: CVE-2016-2141 Source advisory:...

org.jboss.as:jboss-as-clustering-impl (>=7.0.0.cr1, <=7.0.0.final), org.jboss.as:jboss-as-clustering-jgroups (>=7.0.0.cr1, <=7.0.0.final) potentially affected by CVE-2016-2141 via org.jgroups:jgroups (2.12.1.final)

org.jgroups:jgroups MAVEN version 2.12.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jgroups:jgroups and may be impacted: - org.jboss.as:jboss-as-clustering-impl =7.0.0.cr1, =7.0.0.cr1, =7.0.0.final Source cves: CVE-2016-2141 Source...

net.sf.ehcache:ehcache-jgroupsreplication (>=1.4, <=1.5), org.codehaus.fabric3:fabric3-binding-zeromq (1.9) +3 more potentially affected by CVE-2016-2141 via org.jgroups:jgroups (2.10.0.ga)

org.jgroups:jgroups MAVEN version 2.10.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jgroups:jgroups and may be impacted: - net.sf.ehcache:ehcache-jgroupsreplication =1.4, =1.7, =1.7, =0.2, =0.2.3 Source cves: CVE-2016-2141 Source advisory:...

net.peachjean.restmx:restmx (0.1.0), org.hibernate:hibernate-infinispan (>=4.0.0.cr4, <=4.0.0.cr7) +116 more potentially affected by CVE-2016-2141 via org.jgroups:jgroups (2.12.1.3.final)

org.jgroups:jgroups MAVEN version 2.12.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jgroups:jgroups and may be impacted: - net.peachjean.restmx:restmx 0.1.0 - org.hibernate:hibernate-infinispan =4.0.0.cr4, =3.4.1.final, =5.0.0.final,...

org.hibernate:hibernate-search-infinispan (>=3.4.0.cr1, <=3.4.0.final) potentially affected by CVE-2016-2141 via org.jgroups:jgroups (2.12.0.final)

org.jgroups:jgroups MAVEN version 2.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jgroups:jgroups and may be impacted: - org.hibernate:hibernate-search-infinispan =3.4.0.cr1, =3.4.0.final Source cves: CVE-2016-2141 Source advisory:...