log4j-detector

Log4-detector 脆弱なLog4Jバージョンを検出するスキャナーで、チームが CVE-2021-44228（CRITICAL）、CVE-2021-45046、CVE-2021-45105、CVE-2021-44832 への曝露を評価するのに役立ちます。インストールされているすべてのアプリケーションを含む完全なファイルシステムを注意深く調べて、Log4Jインスタンスを検索できます。何層も深く隠されたLog4Jインスタンスも見つけられます。Linux、Windows、Mac、そしてJavaが動作するその他の環境でも動作します！ 目次 はじめに 使用例 その他の使用例 結果の理解...

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

Kubernetes Java 客户端 用于 kubernetes API 的 Java 客户端。 客户端版本管理 Java 客户端采用 Semantic Versioning（语义化版本控制）。每当为新的 Kubernetes 版本重新生成客户端时，我们会递增主版本号（见下表）。每次这样做都会新增 API，并且生成的 Kubernetes API 存根中可能包含破坏性变更。升级主版本时，请做好应对潜在破坏性变更的准备。 安装 要将 Java 客户端库安装到本地 Maven 仓库，只需执行： root@kitploit: git clone --recursive...

Cryptographic Failure org.bouncycastle:bcpkix-jdk18on Dependency in Bamboo Data Center

This High severity Cryptographic Failure vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0 and 12.1.0 of Bamboo Data Center. This Cryptographic Failure vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

HPESBNW04905 rev. 1 - HPE Telco Intelligent Assurance, Improper Access Control in Java Dependency

Potential Security Impact: Local: Gain Unauthorized Access; Remote: Gain Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Intelligent Assurance FAS and PDO 4.2.9 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-48734 |...

Linux Distros Unpatched Vulnerability : CVE-2020-15250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the...

DoS (Denial of Service) com.google.protobuf:protobuf-java Dependency in Bamboo Data Center and Server

This High severity com.google.protobuf:protobuf-java Dependency vulnerability was introduced in versions 9.5.0, 9.6.0, and 10.0.0-rc3 of Bamboo Data Center and Server. This com.google.protobuf:protobuf-java Dependency vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DoS (Denial of Service) software.amazon.ion:ion-java Dependency in Bamboo Data Center and Server

This High severity software.amazon.ion:ion-java Dependency vulnerability was introduced in versions 8.2.1, 9.0.0, 9.1.0, 9.2.1, 9.3.0, 9.4.0, and 9.5.0 of Bamboo Data Center and Server. This software.amazon.ion:ion-java Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

DoS (Denial of Service) org.xerial.snappy:snappy-java Dependency in Jira Software Data Center and Server

This High severity org.xerial.snappy:snappy-java Dependency vulnerability was introduced in versions 8.20.0, 8.22.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, and 9.12.0 of Jira Software Data Center and Server. This org.xerial.snappy:snappy-java...

DoS (Denial of Service) org.xerial.snappy:snappy-java Dependency in Jira Software Data Center and Server

This High severity org.xerial.snappy:snappy-java Dependency vulnerability was introduced in versions 8.20.0, 8.22.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, and 9.12.0 of Jira Software Data Center and Server. This org.xerial.snappy:snappy-java...

DoS (Denial of Service) org.xerial.snappy:snappy-java Dependency in Jira Software Data Center and Server

This High severity org.xerial.snappy:snappy-java Dependency vulnerability was introduced in versions 8.20.0, 8.22.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, and 9.12.0 of Jira Software Data Center and Server. This org.xerial.snappy:snappy-java...