cn.centychen:xxl-job-spring-boot-starter (>=1.0.0-release, <=1.0.1-release), cn.db101:xxl-job-spring-boot-starter (1.1.0) +50 more potentially affected by CVE-2022-40929 via com.xuxueli:xxl-job-core (>=2.0.1, <=2.2.0)

com.xuxueli:xxl-job-core MAVEN version =2.0.1, =1.0.0-release, =0.0.8-release, =0.0.8-release, =1.6.0, =1.0.1, =2.1.1-release, =6.1.0, =0.0.4, =1.5.13, =1.7.1 - com.gitee.zodiacstack:zodiac-xxljob-spring-boot-starter 1.5.16 - com.github.hiwepy:xxljob-spring-boot-starter 1.0.0.release -...

org.nutz:nutzboot-starter-xxl-job-executor (>=2.1.0, <=2.5.1.v20220215) potentially affected by CVE-2022-40929 via com.xuxueli:xxl-job-core (1.9.0)

com.xuxueli:xxl-job-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - org.nutz:nutzboot-starter-xxl-job-executor =2.1.0, =2.5.1.v20220215 Source cves: CVE-2022-40929 Source advisory...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release) potentially affected by CVE-2022-40929 via com.xuxueli:xxl-job-core (1.8.2)

com.xuxueli:xxl-job-core MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release Source cves: CVE-2022-40929 Source advisory:...

com.distelli.graphql:graphql-apigen (>=2.2.0, <=2.3.0), com.distelli.graphql:graphql-apigen-deps (>=2.2.0, <=2.3.0) +4 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (2.4.0)

com.graphql-java:graphql-java MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.distelli.graphql:graphql-apigen =2.2.0, =2.2.0, =2.1.1, =3.0.4, =3.0.4, =3.2.0 Source cves:...

com.introproventures:graphql-jpa-query-boot-starter (>=0.3.8, <=0.3.9), com.introproventures:graphql-jpa-query-example (>=0.3.8, <=0.3.9) +1 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.4)

com.graphql-java:graphql-java MAVEN version 9.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.introproventures:graphql-jpa-query-boot-starter =0.3.8, =0.3.8, =0.3.8, =0.3.9 Source cves:...

com.graphql-java:graphql-java-servlet (>=4.6.0, <=4.7.0), com.graphql-java:graphql-java-tools (>=4.2.0, <=4.3.0) +21 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (6.0)

com.graphql-java:graphql-java MAVEN version 6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =4.6.0, =4.2.0, =3.10.0, =3.10.0, =0.3.1, =0.3.1, =0.3.1, =1.5.7,...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.2), io.pebbletemplates:pebble-spring-boot-starter (2.6.2) +3 more potentially affected by CVE-2022-37767 via io.pebbletemplates:pebble (2.6.2)

io.pebbletemplates:pebble MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.2 - io.pebbletemplates:pebble-spring-boot-starter 2.6.2 -...

io.pebbletemplates:pebble-spring-boot-starter (2.5.0), io.pebbletemplates:pebble-spring3 (2.5.0) +1 more potentially affected by CVE-2022-37767 via io.pebbletemplates:pebble (2.5.0)

io.pebbletemplates:pebble MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-starter 2.5.0 - io.pebbletemplates:pebble-spring3 2.5.0 -...

com.graphql-java:graphql-java-servlet (>=5.0.0, <=5.0.1), com.graphql-java:graphql-java-tools (>=5.0.0, <=5.2.3) +51 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (8.0)

com.graphql-java:graphql-java MAVEN version 8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =5.0.0, =5.0.0, =4.1.0, =4.1.0, =1.5.18, =1.5.18, =1.5.13, =1.5.1...

io.github.shuigedeng:taotao-cloud-starter-agent (>=2022.09, <=2022.10), io.github.shuigedeng:taotao-cloud-starter-apt (>=2022.09, <=2022.10) +234 more potentially affected by CVE-2022-37435 via org.apache.shenyu:shenyu-common (>=2.4.2, <=2.4.3)

org.apache.shenyu:shenyu-common MAVEN version =2.4.2, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.10 and more Source cves: CVE-2022-37435 Source advisory: GHSA-FJJW-82XW-VFC2https://vu...

io.github.shuigedeng:taotao-cloud-starter-agent (>=2022.09, <=2022.10), io.github.shuigedeng:taotao-cloud-starter-apt (>=2022.09, <=2022.10) +234 more potentially affected by CVE-2022-37435 via org.apache.shenyu:shenyu-common (>=2.4.2, <=2.4.3)

org.apache.shenyu:shenyu-common MAVEN version =2.4.2, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.10 and more Source cves: CVE-2022-37435 Source advisory: OSV:GHSA-FJJW-82XW-VFC2https:...

io.github.shuigedeng:taotao-cloud-starter-agent (>=2022.09, <=2022.10), io.github.shuigedeng:taotao-cloud-starter-apt (>=2022.09, <=2022.10) +234 more potentially affected by CVE-2022-37435 via org.apache.shenyu:shenyu-common (>=2.4.2, <=2.4.3)

org.apache.shenyu:shenyu-common MAVEN version =2.4.2, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.09, =2022.10 and more Source cves: CVE-2022-37435 Source advisory: MEND:CVE-2022-37435https://vu...

Siemens STEP 7 Privilege Escalation

The vulnerabilities of the microprogramming software for Siemens STEP 7 programmable logic controllers, the systems for managing production processes such as Opcenter Execution Discrete, Opcenter Execution Process, Opcenter Execution Foundation, Opcenter Intelligence, Opcenter Quality, SIMATIC IT...

Siemens STEP 7

The vulnerabilities of the microprogramming software for Siemens STEP 7 programmable logic controllers, the systems for managing production processes such as Opcenter Execution Discrete, Opcenter Execution Process, Opcenter Execution Foundation, Opcenter Intelligence, Opcenter Quality, SIMATIC IT...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

PT-2022-37506 · Apptainer +3 · Apptainer +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as vulnerable in the provided descriptions. Description: The issue concerns updates for permissions that fix several problems, including the starter-suid location in apptainer, removal of...

Security Bulletin: A failed attempt to regenerate an IBM Security Verify Information Queue API token reveals sensitive data (CVE-2022-35288)

Summary When a malformed request to regenerate an external API token is sent to IBM Security Verify Information Queue ISIQ v10.0.2, the resulting error message reveals sensitive data. ISIQ v10.0.3 has remediated this information exposure vulnerability. CVE-2022-35288 Vulnerability Details...

Security Bulletin: Audit events query facility in IBM Security Verify Information Queue is vulnerable to SQL injection (CVE-2022-35285)

Summary The query facility in the Audit Events UI of IBM Security Verify Information Queue ISIQ v10.0.2 is vulnerable to SQL injection. This could allow an attacker to use cross-site request forgery for the purpose of executing unauthorized actions. ISIQ v10.0.3 has secured the Audit Events UI to...