CVE-2024-52051: Improper Input Validation

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 All versions, SIMATIC S7-PLCSIM V18 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions V18 Update 6, SIMATIC STEP 7 Safety V19 All versions V19 Update 4, SIMATIC STEP 7 V17 All...

CVE-2024-49849: Deserialization of Untrusted Data

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions V18 Update 6, SIMATIC STEP 7 Safety V19 All versions V...

com.kakawait:cas-security-dynamic-service-resolver (>=0.1.0, <=0.4.0), com.kakawait:cas-security-spring-boot-autoconfigure (>=0.1.0, <=0.3.2) +9 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-cas (>=4.2.2.release, <=4.2.14.release)

org.springframework.security:spring-security-cas MAVEN version =4.2.2.release, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =9.4.0.10, =2.3.0, =2.3.0, =5.20.2, =5.21.1, =5.22.7 Source cves: CVE-2024-38827 Source advisory: MEND:CVE-2024-38827...

com.lt-peacock:webdbviewer (>=1.0.0, <=1.0.2), ee.telekom.workflow:workflow-web (>=1.5.0, <=1.6.3) +5 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-taglibs (>=5.7.1, <=5.7.13)

org.springframework.security:spring-security-taglibs MAVEN version =5.7.1, =1.0.0, =1.5.0, =4.7.0, =4.7.0, =5.2.7, =5.7.2.release, =5.7.2.release, =5.7.4.release Source cves: CVE-2024-38827 Source advisory: MEND:CVE-2024-38827...

Malware in starter-assets-sass

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11054 Malicious code in nft-dapp-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b97b6a233f40dca2413760c7d1f9a8cafb4a0ed8099ab831ebbe6e8a0fba6ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nft-dapp-starter-kit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

de.adorsys.oauth:oauth-wildfly-support (>=0.12, <=0.35), io.undertow:undertow-servlet (1.1.8.final) +4 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.8.final)

io.undertow:undertow-core MAVEN version 1.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.adorsys.oauth:oauth-wildfly-support =0.12, =7.12.0, =1.2.6.release, =1.2.7.release -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.debezium:debezium-microbenchmark (0.9.5.final), org.apache.camel:camel-debezium (>=3.0.0-rc2, <=3.0.0-rc3) +1 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-mysql (0.9.5.final)

io.debezium:debezium-connector-mysql MAVEN version 0.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-mysql and may be impacted: - io.debezium:debezium-microbenchmark 0.9.5.final - org.apache.camel:camel-debezium...

io.debezium:debezium-microbenchmark (1.6.2.final), org.apache.camel.springboot:camel-debezium-mysql-starter (3.12.0) +1 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-mysql (1.6.2.final)

io.debezium:debezium-connector-mysql MAVEN version 1.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-mysql and may be impacted: - io.debezium:debezium-microbenchmark 1.6.2.final -...

io.debezium:debezium-microbenchmark (1.7.0.final), io.streamnative:pulsar-io-debezium-mysql (>=2.9.0.0-rc-1, <=2.10.0-rc-202111052205) +3 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-mysql (1.7.0.final)

io.debezium:debezium-connector-mysql MAVEN version 1.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-mysql and may be impacted: - io.debezium:debezium-microbenchmark 1.7.0.final -...

org.apache.camel.quarkus:camel-quarkus-debezium-sqlserver (>=1.2.0, <=1.5.0), org.apache.camel.quarkus:camel-quarkus-debezium-sqlserver-deployment (>=1.2.0, <=1.5.0) +3 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.3.0.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - org.apache.camel.quarkus:camel-quarkus-debezium-sqlserver =1.2.0, =1.2.0,...

io.streamnative:pulsar-io-debezium-mssql (>=2.9.1.1, <=2.10.0-rc-2021121511380612), org.apache.camel.springboot:camel-debezium-sqlserver-starter (>=3.14.0, <=3.14.10) +7 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.7.1.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.7.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - io.streamnative:pulsar-io-debezium-mssql =2.9.1.1, =3.14.0, =3.14.0,...

org.apache.camel.springboot:camel-debezium-sqlserver-starter (3.17.0), org.apache.camel:camel-debezium-sqlserver (3.17.0) potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.9.1.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - org.apache.camel.springboot:camel-debezium-sqlserver-starter 3.17.0 -...

org.apache.camel.springboot:camel-debezium-sqlserver-starter (>=3.18.0, <=3.18.1), org.apache.camel:camel-debezium-sqlserver (>=3.18.0, <=3.18.1) potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.9.4.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - org.apache.camel.springboot:camel-debezium-sqlserver-starter =3.18.0,...

io.kestra.plugin:plugin-debezium-sqlserver (0.5.0), org.apache.camel.quarkus:camel-quarkus-debezium-sqlserver (>=2.11.0, <=2.13.0) +3 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.9.5.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - io.kestra.plugin:plugin-debezium-sqlserver 0.5.0 -...