PT-2022-16875 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions 2.8.2 and prior in the stable branch Discourse versions 2.9.0.beta3 and prior in the beta branch Discourse versions 2.9.0.beta3 and prior in the tests-passed branch Description: Discourse is an open source discussion...

Discourse Information Leakage Vulnerability

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse is vulnerable to an information disclosure vulnerability that originates in the "stable" branch of version 2.8.2 and earlier, the "beta" branch of version 2.9.0.bet...

Security update for bitcoin (moderate)

openSUSE Security Update: Security update for bitcoin Announcement ID: openSUSE-SU-2022:0072-1 Rating: moderate References: Cross-References: CVE-2021-3195 CVSS scores: CVE-2021-3195 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 An update...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.1) +5 more potentially affected by CVE-2022-24948 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.1 Source cves: CVE-2022-24948 Source advisory: OSV:GHSA-9953-FMRW-V4VM...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.1) +5 more potentially affected by CVE-2022-24947 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.1 Source cves: CVE-2022-24947 Source advisory: OSV:GHSA-4284-X26R-4HHC...

MariaDB -- Multiple vulnerabilities

MariaDB reports: MariaDB reports 5 vulnerabilities in supported versions resulting from fuzzing tests...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.keycloak:keycloak-account-freemarker (1.0-alpha-3), org.keycloak:keycloak-login-freemarker (1.0-alpha-3) +1 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-services (1.0-alpha-3)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-3 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-account-freemarker (1.0-alpha-4), org.keycloak:keycloak-login-freemarker (1.0-alpha-4) +1 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-services (1.0-alpha-4)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-4 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150521), org.keycloak:keycloak-login-freemarker (1.0-beta-1-20150521) +1 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-services (1.0-beta-1-20150521)

org.keycloak:keycloak-services MAVEN version 1.0-beta-1-20150521 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-beta-1-20150521 -...

pathologytestsexplained.org.au Cross Site Scripting vulnerability OBB-2356457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mageia: Security Advisory (MGASA-2021-0042)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0327)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

com.google.code.maven-play-plugin.com.sienaproject.siena:siena (1.0.0-b6-20111107), ma.glasnost.orika:orika-tests (>=1.4.0, <=1.5.2) +5 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.154)

com.h2database:h2 MAVEN version 1.3.154 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.google.code.maven-play-plugin.com.sienaproject.siena:siena 1.0.0-b6-20111107 - ma.glasnost.orika:orika-tests =1.4.0,...

org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150523), org.keycloak:keycloak-login-freemarker (1.0-beta-1-20150523) +1 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (1.0-beta-1-20150523)

org.keycloak:keycloak-services MAVEN version 1.0-beta-1-20150523 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-beta-1-20150523 -...

org.keycloak:keycloak-account-freemarker (1.0-alpha-4), org.keycloak:keycloak-login-freemarker (1.0-alpha-4) +1 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (1.0-alpha-4)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-4 - org.keycloak:keycloak-login-freemarker...

PT-2025-8568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A subtraction overflow bug has been resolved in the Linux kernel. The issue occurs when hole end is small enough to cause a subtraction overflow, or when addr + 2 min alignment overflows...

com.textrecruit.ustack:textrecruit-ustack-server (>=1.0.1, <=1.0.31), com.typesafe.akka:akka-file-mailbox_2.10.0-m7 (2.1-m2) +7 more potentially affected by CVE-2021-43797 via io.netty:netty (3.5.4.final)

io.netty:netty MAVEN version 3.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.textrecruit.ustack:textrecruit-ustack-server =1.0.1, =1.0.39, =2.1.96, =2.1.115 - com.zipwhip:zipwhip-api 1.28.3-final...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-40369 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-40369 Source advisory: GHSA-CFQJ-9G2G-W7Q6...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-44140 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-44140 Source advisory: OSV:GHSA-8GW6-W5RW-4G5C...