org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m3), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m3) +1 more potentially affected by CVE-2019-10076 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m3)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m3 Source cves: CVE-2019-10076 Source advisory: GHSA-CXX2-FP39-RF3R...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m3), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m3) +1 more potentially affected by CVE-2019-10076 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m3)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m3 Source cves: CVE-2019-10076 Source advisory: OSV:GHSA-CXX2-FP39-RF3R...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m3), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m3) +1 more potentially affected by CVE-2019-10077 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m3)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m3 Source cves: CVE-2019-10077 Source advisory: MEND:CVE-2019-10077...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m3), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m3) +1 more potentially affected by CVE-2019-10076 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m3)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m3 Source cves: CVE-2019-10076 Source advisory: MEND:CVE-2019-10076...

Developers Versus Automation Engineers: How We Ended the Fighting with the Right CI Process

Hey developers and DevOps professionals: what if I told you that how you wrap and execute your automation tests could be the key to making your development process faster, more professional and stable, and stop the bickering between your developers and automation teams? This post will describe ho...

[SECURITY] Fedora 29 Update: meson-0.50.0-4.fc29

Meson is a build system designed to optimize programmer productivity. It aims to do this by providing simple, out-of-the-box support for modern software development tools and practices, such as unit tests, coverage reports, Valgrind, CCache and the like...

Microsoft Windows Security Feature Bypass (CVE-2019-0732)

A security bypass vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

CSRF vulnerability and missing permission check in audit2db allow connecting to arbitrary databases

A missing permission check in a form validation method in audit2db allows users with Overall/Read permission to initiate a JDBC database connection test to an attacker-specified server with attacker-specified credentials. Additionally, the form validation method does not require POST requests,...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m2), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m2) +1 more potentially affected by CVE-2019-0224 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m2 Source cves: CVE-2019-0224 Source advisory: GHSA-FMPQ-W5Q6-9VF9...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m2), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m2) +1 more potentially affected by CVE-2019-0224 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m2 Source cves: CVE-2019-0224 Source advisory: OSV:GHSA-FMPQ-W5Q6-9VF9...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m2), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m2) +1 more potentially affected by CVE-2019-0224 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m2 Source cves: CVE-2019-0224 Source advisory: MEND:CVE-2019-0224...

openSUSE Security Update : nextcloud (openSUSE-2019-640)

This update for nextcloud to version 13.0.5 fixes the following issues : Security issues fixed : - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names,...

org.apache.reef:reef-examples (0.16.0), org.apache.reef:reef-examples-clr (>=0.14.0, <=0.16.0) +3 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.25.0)

org.apache.mesos:mesos MAVEN version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.reef:reef-examples 0.16.0 - org.apache.reef:reef-examples-clr =0.14.0, =0.14.0, =0.14.0, =0.16.0 Source...

CVE-2019-3781: CF CLI does not sanitize user's password in verbose/trace/debug | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions Severity is high unless otherwise noted. CF CLI All versions prior to v6.43.0 CF CLI Release All versions prior to v1.13.0 CF Networking Release All versions Prior to v2.23.0 CF Routing Release All versions...

org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: OSV:GHSA-5Q75-CXCQ-WR26...

org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: GHSA-5Q75-CXCQ-WR26...

org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: MEND:CVE-2018-20242...

FTW - Framework For Testing WAFs

This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP requests that will trigger these rules...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2018:1183-1)

This update for nodejs6 fixes the following issues : - Fix some node-gyp permissions - New upstream LTS release 6.14.1 : - Security fixes : + CVE-2018-7160: Fix for inspector DNS rebinding vulnerability bsc1087463 + CVE-2018-7158: Fix for 'path' module regular expression denial of service...

SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2018:0952-1)

This update for nodejs4 fixes the following issues : - Fix some node-gyp permissions - New upstream maintenance 4.9.1 : - Security fixes : + CVE-2018-7158: Fix for 'path' module regular expression denial of service bsc1087459 + CVE-2018-7159: Reject spaces in HTTP Content-Length header values...