org.apache.qpid:qpid-bdbstore (0.26), org.apache.qpid:qpid-broker (0.26) +2 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (0.26)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version 0.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol and may be impacted: - org.apache.qpid:qpid-bdbstore 0.26 -...

org.apache.qpid:qpid-bdbstore (>=6.0.0, <=6.0.2), org.apache.qpid:qpid-bdbstore-jmx (>=6.0.0, <=6.0.2) +3 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=6.0.0, <=6.0.2)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.2 Source cves: CVE-2016-4432 Source advisory: OSV:GHSA-Q66C-H853-GQW2...

msg-topgen (>=0.1.4, <=0.1.7) potentially affected by CVE-2016-3096 via ansible (2.0.0.0)

ansible PYPI version 2.0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - msg-topgen =0.1.4, =0.1.7 Source cves: CVE-2016-3096 Source advisory: GHSA-RH6X-QVG7-RRMJ...

msg-topgen (>=0.1.4, <=0.1.7) potentially affected by CVE-2016-3096 via ansible (2.0.0.0)

ansible PYPI version 2.0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - msg-topgen =0.1.4, =0.1.7 Source cves: CVE-2016-3096 Source advisory: OSV:GHSA-RH6X-QVG7-RRMJ...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2016-8647 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2016-8647 Source advisory: OSV:GHSA-X4CM-M36H-C6QJ...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2016-8614 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2016-8614 Source advisory: OSV:GHSA-CMWX-9M2H-X7V4...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2016-8628 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2016-8628 Source advisory: OSV:GHSA-JG4F-JQM5-4MGQ...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2016-9587 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2016-9587 Source advisory: GHSA-M956-FRF4-M2WR...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2016-9587 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2016-9587 Source advisory: OSV:GHSA-M956-FRF4-M2WR...

DedeCMS Cross-Site Scripting Vulnerability (CNVD-2018-19871)

DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the /plus/feedbackajax.php file in DedeCMS version 5.7 SP2, which can be exploited by remote attackers to execute JavaScript code with the help of the onhashchange attribute in the 'msg'...

CVE-2018-16786: Improper Neutralization of Input During Web Page Generation

DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedbackajax.php...

PT-2018-13748

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 SP2 Description The issue allows for XSS via an onhashchange attribute in the msg parameter to "/plus/feedback ajax.php" API endpoint. Recommendations For DedeCMS version 5.7 SP2, consider restricting access to the...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2017-7481 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2017-7481 Source advisory: OSV:GHSA-W578-J992-554X...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2017-7481 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2017-7481 Source advisory: GHSA-W578-J992-554X...

PT-2018-13107

Name of the Vulnerable Software and Affected Versions Dropbear versions prior to 2018.76 Description The issue is related to a user enumeration problem in the recv msg userauth request function. This function is located in svr-auth.c and is prone to a vulnerability because the validity of usernam...

ansible-flow (0.1.0), cloudmesh-client (>=4.2.6, <=4.4.0) +4 more potentially affected by CVE-2016-8614 via ansible (>=1.9.4, <=2.1.2.0)

ansible PYPI version =1.9.4, =4.2.6, =0.0.11, =0.1.4, =1.0.0, =0.1.7, =0.1.14 Source cves: CVE-2016-8614 Source advisory: MEND:CVE-2016-8614...

UBUNTU-CVE-2017-7558

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inetdiagmsgsctp,laddrfill and sctpgetsctpinfo functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic...

ansible-flow (0.1.0), cloudmesh-client (>=4.2.6, <=4.4.0) +4 more potentially affected by CVE-2016-8647 via ansible (>=1.9.4, <=2.1.2.0)

ansible PYPI version =1.9.4, =4.2.6, =0.0.11, =0.1.4, =1.0.0, =0.1.7, =0.1.14 Source cves: CVE-2016-8647 Source advisory: MEND:CVE-2016-8647...

ansible-flow (0.1.0), cloudmesh-client (>=4.2.6, <=4.4.0) +4 more potentially affected by CVE-2017-7481 via ansible (>=1.9.4, <=2.1.2.0)

ansible PYPI version =1.9.4, =4.2.6, =0.0.11, =0.1.4, =1.0.0, =0.1.7, =0.1.14 Source cves: CVE-2017-7481 Source advisory: MEND:CVE-2017-7481...

PT-2018-17170

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-06-05 Description: A buffer overflow can potentially occur while processing the HTT T2H MSG TYPE MGMT TX COMPL IND message in Android releases that use the linux kernel. Recommendations: For...