838 matches found
mongo-rest-api (0.1.0), pine-ql (>=0.1.0, <=0.5.4) potentially affected by CVE-2020-28272 via keyget (1.0.1)
keyget NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api 0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272 Source advisory: GHSA-8MP8-28XH-R486...
mongo-rest-api (0.1.0), pine-ql (>=0.1.0, <=0.5.4) potentially affected by CVE-2020-28272 via keyget (1.0.1)
keyget NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api 0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272 Source advisory: OSV:GHSA-8MP8-28XH-R486...
com.twitter.ambrose:ambrose-common (>=0.2.0, <=0.3.0), com.twitter.ambrose:ambrose-hive (>=0.2.6, <=0.3.0) +8 more potentially affected by CVE-2016-5001 via org.apache.hadoop:hadoop-common (0.22.0)
org.apache.hadoop:hadoop-common MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - com.twitter.ambrose:ambrose-common =0.2.0, =0.2.6, =0.2.0, =1.0.0, =1.0.5 -...
Fedora: Security Advisory for golang-mongodb-mongo-driver (FEDORA-2022-08ae2dd481)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-mongodb-mongo-driver (FEDORA-2022-5cbd6de569)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-mongodb-mongo-driver (FEDORA-2022-3a63897745)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
org.keycloak:keycloak-authz-policy-drools (2.3.0.final), org.keycloak:keycloak-dependencies-server-all (2.3.0.final) +5 more potentially affected by unknown CVE via org.keycloak:keycloak-services (2.3.0.final)
org.keycloak:keycloak-services MAVEN version 2.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.3.0.final -...
org.keycloak:keycloak-authz-policy-drools (2.5.5.final), org.keycloak:keycloak-dependencies-server-all (2.5.5.final) +5 more potentially affected by unknown CVE via org.keycloak:keycloak-services (2.5.5.final)
org.keycloak:keycloak-services MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.5.5.final -...
org.keycloak:keycloak-authz-policy-drools (2.3.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.3.0.cr1) +5 more potentially affected by unknown CVE via org.keycloak:keycloak-services (2.3.0.cr1)
org.keycloak:keycloak-services MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.3.0.cr1 -...
org.keycloak:keycloak-authz-policy-drools (2.5.1.final), org.keycloak:keycloak-dependencies-server-all (2.5.1.final) +5 more potentially affected by unknown CVE via org.keycloak:keycloak-services (2.5.1.final)
org.keycloak:keycloak-services MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.5.1.final -...
org.keycloak:keycloak-authz-policy-drools (2.4.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.4.0.cr1) +5 more potentially affected by unknown CVE via org.keycloak:keycloak-services (2.4.0.cr1)
org.keycloak:keycloak-services MAVEN version 2.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.4.0.cr1 -...
org.keycloak:keycloak-authz-policy-drools (2.5.0.final), org.keycloak:keycloak-dependencies-server-all (2.5.0.final) +5 more potentially affected by CVE-2022-1245 via org.keycloak:keycloak-services (2.5.0.final)
org.keycloak:keycloak-services MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.5.0.final -...
com.twitter.ambrose:ambrose-common (>=0.2.0, <=0.3.0), com.twitter.ambrose:ambrose-hive (>=0.2.6, <=0.3.0) +8 more potentially affected by CVE-2022-26612 via org.apache.hadoop:hadoop-common (0.22.0)
org.apache.hadoop:hadoop-common MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - com.twitter.ambrose:ambrose-common =0.2.0, =0.2.6, =0.2.0, =1.0.0, =1.0.5 -...
com.impetus.client:kundera-hbase (>=2.1, <=2.2.1), com.impetus.client:kundera-mongo (>=2.1, <=2.2.1) +77 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.6.8.final)
org.hibernate:hibernate-core MAVEN version 3.6.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.impetus.client:kundera-hbase =2.1, =2.1, =2.1, =2.1, =1.0.0, =1.0.1, =1.0.4, =2.3.0, =2.5.0,...
org.keycloak:keycloak-authz-policy-drools (2.5.4.final), org.keycloak:keycloak-dependencies-server-all (2.5.4.final) +5 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-services (2.5.4.final)
org.keycloak:keycloak-services MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.5.4.final -...
org.keycloak:keycloak-authz-policy-drools (2.4.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.4.0.cr1) +5 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-services (2.4.0.cr1)
org.keycloak:keycloak-services MAVEN version 2.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.4.0.cr1 -...
mongo-rest-api (0.1.0), pine-ql (>=0.1.0, <=0.5.4) potentially affected by CVE-2020-28272 +1 more via keyget (1.0.1)
keyget NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api 0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272, CVE-2021-23760 Source advisory: SNYK:JS-KEYGET-2342624...
Rocket.Chat: API route chat.getThreadsList leaks private message content
Summary The /api/v1/chat.getThreadsList does not sanitize user inputs and can therefore leak private thread messages to unauthorized users via Mongo DB injection. Description The chat.getThreadsList API route is defined in app/api/server/v1/chat.jsL522-L572: javascript const rid, type, text =...
org.keycloak:keycloak-authz-policy-drools (2.5.0.final), org.keycloak:keycloak-dependencies-server-all (2.5.0.final) +5 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (2.5.0.final)
org.keycloak:keycloak-services MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.5.0.final -...
