org.apache.camel.springboot:camel-debezium-sqlserver-starter (>=3.18.0, <=3.18.1), org.apache.camel:camel-debezium-sqlserver (>=3.18.0, <=3.18.1) potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.9.4.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - org.apache.camel.springboot:camel-debezium-sqlserver-starter =3.18.0,...

io.kestra.plugin:plugin-debezium-sqlserver (0.5.0), org.apache.camel.quarkus:camel-quarkus-debezium-sqlserver (>=2.11.0, <=2.13.0) +3 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.9.5.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - io.kestra.plugin:plugin-debezium-sqlserver 0.5.0 -...

org.apache.camel.quarkus:camel-quarkus-debezium-sqlserver (>=3.0.0-m1, <=3.0.0-rc1), org.apache.camel.quarkus:camel-quarkus-debezium-sqlserver-deployment (>=3.0.0-m1, <=3.0.0-rc1) +3 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (>=2.1.2.final, <=2.2.1.final)

io.debezium:debezium-connector-sqlserver MAVEN version =2.1.2.final, =3.0.0-m1, =3.0.0-m1, =4.0.0-m2, =4.0.0-m2, =4.0.0-rc1 - org.wso2.orbit.debezium:debezium 2.1.4.final.wso2v2 Source cves: CVE-2023-1419 Source advisory: OSV:GHSA-HVW5-3MGW-7RCF...

io.kestra.plugin:plugin-debezium-sqlserver (>=0.6.0, <=0.14.0), org.apache.camel.quarkus:camel-quarkus-debezium-sqlserver (>=2.13.1, <=2.16.0) +3 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.9.6.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.9.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - io.kestra.plugin:plugin-debezium-sqlserver =0.6.0, =2.13.1, =2.13.1,...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

auto-ml (>=2.9.0, <=2.9.10), automl (>=2.9.0, <=2.9.9) +3 more potentially affected by CVE-2024-43598 via lightgbm (2.0.12)

lightgbm PYPI version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on lightgbm and may be impacted: - auto-ml =2.9.0, =2.9.0, =0.0.1, =0.1.0, =1.0.1 Source cves: CVE-2024-43598 Source advisory: OSV:PYSEC-2024-231...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) +11 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =1.0.0, =1.1.3, =1.1.3, =1.1.3, =1.1.2-snapshots, =1.1.2-snapshots, =1.1.2-snapshots, =11.0.0-m1, =11.0.0-m1, =2.0.0, =2.0.2 Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2016-1000273 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2016-1000273 Source advisory: MEND:CVE-2016-1000273...

Rockwell Automation’s various products have security vulnerabilities

Rockwell Automation RSLogix 500 and others are products of Rockwell Automation, a U.S. company.Rockwell Automation RSLogix 500 is a suite of programming software for industrial control systems.Rockwell Automation Rockwell Automation RSLogix Micro Developer and Starter is an industrial control...

io.github.baseinsight:plugin-springsecurity-rest-db-starter (>=0.2.0, <=0.2.1), io.github.baseinsight:plugin-springsecurity-rest-redis-starter (>=0.2.0, <=0.2.1) +17 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.9.0)

org.pac4j:pac4j-core MAVEN version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.github.baseinsight:plugin-springsecurity-rest-db-starter =0.2.0, =0.2.0, =0.2.0, =0.1.3, =2.0.0, =2.0.0, =2.0.1 -...

Malicious code in ts-jest-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c8f8d1bb529584dca1e5c310895c30958385530f5241f3a8a364caffb33347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9278 Malicious code in ts-jest-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c8f8d1bb529584dca1e5c310895c30958385530f5241f3a8a364caffb33347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ts-jest-starter-kit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-47345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Starter Templates astra-sites allows Stored XSS.This issue affects Starter Templates: from n/a through = 4.4.0...

PT-2024-32560

Name of the Vulnerable Software and Affected Versions Brainstorm Force Starter Templates versions n/a through 4.4.0 Description The issue is related to improper neutralization of input during web page generation, which allows Stored Cross-site Scripting XSS. This means that an attacker can inject...