CVE-2021-22573 Incorrect signature verification on Google-oauth-java-client

The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payload. The token will pass the validation ...

Google google-oauth-java-client Data Forgery Vulnerability

Google google-oauth-java-client Google OAuth Client Library for Java is a Java-based Google OAuth Open Authorization client library from Google, Inc. A security vulnerability exists in Google google-oauth-java-client, which stems from the IDToken authenticator not verifying that tokens are proper...

com.amazon.aes.webservices.client:ec2-java-client (20080327), com.cybersource:cybersource-sdk-java (>=6.2.0, <=6.2.1) +83 more potentially affected by CVE-2011-2487 via wss4j:wss4j (>=1.5.0, <=1.5.1)

wss4j:wss4j MAVEN version =1.5.0, =6.2.0, =1.0.12, =9.00.2110.07.220316, =0.0.9, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.3.0 - com.github.rapidark:rapid-ark-pretty 0.3.0 - com.github.rapidark:rapid-ark-pretty-demo 0.3.0 - com.github.rapidark:rapid-ark-pretty-demo-keeper 0.3.0 -...

CVE-2022-1279

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...

CVE-2022-1279

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...

CVE-2022-1279 Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...

CVE-2022-1279: Missing Cryptographic Step

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...

EBICS Java Client security vulnerability

EBICS Java Client is a Java open source EBICS client. It is used to interact with banks using EBICS Electronic Banking Internet Communications Standard. A security vulnerability exists in EBICS Java Client versions prior to 1.2, which stems from a problem with the cryptographic implementation of...

com.free-now.apis:phrase-java-client (>=1.0.8, <=3.0.0), com.free-now.maven.plugins:phrase-plugin (>=2.0.0, <=2.1.0) +79 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (3.2.15.release)

org.springframework:spring-expression MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.free-now.apis:phrase-java-client =1.0.8, =2.0.0, =2.0.1, =2.0.1, =3.1.0,...

OPENSUSE-SU-2022:0016-1 Security update for watchman

This update for watchman fixes the following issues: - ship README.suse that explains how to use the template systemd units - add user writable bit for systemd service and socket files - properly handle state directory creation in /run/watchman/$USER-state. The former approach was susceptible to ...

GHSA-M8WH-MQGF-RR8G Code injection in Kubernetes Java Client

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25738

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25738

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

Remote code execution

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25738 Code exec via yaml parsing

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25738

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25738

CVE-2021-25738: The vulnerability arises from loading specially crafted YAML via the Kubernetes Java Client library, enabling code execution. Connected documents consistently describe this YAML-loading path as the root cause and code execution outcome. The public data does not provide precise aff...

PT-2021-16765 · Unknown · Kubernetes Java Client Libraries

Name of the Vulnerable Software and Affected Versions: Kubernetes Java Client library affected versions not specified Description: Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution. Recommendations: At the moment, there is no information about a new...

CVE-2021-25738: Improper Input Validation

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

id.co.veritrans:vt-java-client (>=1.0.0, <=1.0.4), org.hibernate:hibernate-validator-cdi (5.2.0.beta1) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (5.2.0.beta1)

org.hibernate:hibernate-validator MAVEN version 5.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - id.co.veritrans:vt-java-client =1.0.0, =1.0.4 - org.hibernate:hibernate-validator-cdi...