428 matches found
AZL-54290 CVE-2024-45337 affecting package packer for versions less than 1.9.5-5
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
AZL-54330 CVE-2024-45337 affecting package packer for versions less than 1.9.5-4
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
CVE-2024-24786 affecting package packer for versions less than 1.9.5-3
CVE-2024-24786 affecting package packer for versions less than 1.9.5-3. A patched version of the package is available...
LodaRAT: Established Malware, New Victim Patterns
Executive Summary Rapid7 has observed an ongoing malware campaign involving a new version of LodaRAT. This version possesses the ability to steal cookies and passwords from Microsoft Edge and Brave. LodaRAT, first observed in 2016, is a remote access tool RAT written in AutoIt. Development of...
AZL-52189 CVE-2024-51744 affecting package packer for versions less than 1.9.5-9
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
AZL-52233 CVE-2024-51744 affecting package packer for versions less than 1.9.5-12
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
CBL Mariner 2.0 Security Update: packer (CVE-2023-49568)
The version of packer installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49568 advisory. - A denial of service DoS vulnerability was discovered in go-git versions prior to v5.11. This vulnerability...
CBL Mariner 2.0 Security Update: packer (CVE-2023-49569)
The version of packer installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49569 advisory. - A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows a...
CVE-2023-45288 affecting package packer for versions less than 1.9.5-1
CVE-2023-45288 affecting package packer for versions less than 1.9.5-1. A patched version of the package is available...
CVE-2023-48795 affecting package packer for versions less than 1.9.5-1
CVE-2023-48795 affecting package packer for versions less than 1.9.5-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-3064 affecting package packer for versions less than 1.9.5-1
CVE-2022-3064 affecting package packer for versions less than 1.9.5-1. A patched version of the package is available...
CVE-2023-49568 affecting package packer for versions less than 1.9.5-1
CVE-2023-49568 affecting package packer for versions less than 1.9.5-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-39325 affecting package packer for versions less than 1.9.5-1
CVE-2023-39325 affecting package packer for versions less than 1.9.5-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-49569 affecting package packer for versions less than 1.9.5-1
CVE-2023-49569 affecting package packer for versions less than 1.9.5-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-6104 affecting package packer for versions less than 1.9.5-2
CVE-2024-6104 affecting package packer for versions less than 1.9.5-2. A patched version of the package is available...
ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1603 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.452.3)
org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2024-43045 Source advisory: OSV:GHSA-8PV9-QH96-9HC6...
CVE-2024-6104 affecting package packer for versions less than 1.9.5-2
CVE-2024-6104 affecting package packer for versions less than 1.9.5-2. A patched version of the package is available...
CVE-2024-24786 affecting package packer for versions less than 1.9.5-4
CVE-2024-24786 affecting package packer for versions less than 1.9.5-4. A patched version of the package is available...
CVE-2025-21614 affecting package packer for versions less than 1.9.5-7
CVE-2025-21614 affecting package packer for versions less than 1.9.5-7. An upgraded version of the package is available that resolves this issue...