[SECURITY] Fedora 35 Update: golang-x-perf-0-0.15.20210123gitbdcc622.fc35

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

[SECURITY] Fedora 35 Update: golang-github-gogo-protobuf-1.3.2-5.fc35

Gogoprotobuf is a fork of golang/protobuf with extra code generation features. This code generation is used to achieve: - fast marshalling and unmarshalling - more canonical Go structures - goprotobuf compatibility - less typing by optionally generating extra helper code - peace of mind by...

DSAB path traversal vulnerability

DSAB is a dataflow algorithm benchmark. A benchmark designed to test the performance of various dataflow algorithms on multiple datasets in a simple way.DSAB suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements ...

DSAB path traversal vulnerability

DSAB is a data streaming algorithm benchmark. A benchmark designed to test the performance of various data streaming algorithms on multiple datasets in a simple manner. A security vulnerability exists in DSAB version 2.1 and earlier versions, which stems from insecure use of Flask's sendfile...

DSAB path traversal vulnerability

DSAB is a dataflow algorithm benchmark. A benchmark designed to test the performance of various dataflow algorithms on multiple datasets in a simple way.DSAB suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements ...

[SECURITY] Fedora 36 Update: golang-x-perf-0-0.15.20210123gitbdcc622.fc36

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

Malicious code in github-action-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f873a3ef25b833c6a1b1d4b8d5079265a195382dc4dbbfda249bcf9ae8d20c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3371 Malicious code in github-action-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f873a3ef25b833c6a1b1d4b8d5079265a195382dc4dbbfda249bcf9ae8d20c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.drools.planner:drools-planner-core (5.3.5.final), org.drools.planner:drools-planner-distribution (5.3.5.final) +32 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.3.5.final)

org.drools:drools-core MAVEN version 5.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.5.final - org.drools.planner:drools-planner-distribution 5.3.5.fin...

org.drools.planner:drools-planner-core (5.3.0.cr1), org.drools.planner:drools-planner-distribution (5.3.0.cr1) +22 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.3.0.cr1)

org.drools:drools-core MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.0.cr1 - org.drools.planner:drools-planner-distribution 5.3.0.cr1 -...

de.svenkubiak:mangooio-mongodb-extension (2.0.1), io.mangoo:mangooio-benchmark (2.2.0) +26 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.3.12.final)

io.undertow:undertow-core MAVEN version 1.3.12.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.svenkubiak:mangooio-mongodb-extension 2.0.1 - io.mangoo:mangooio-benchmark 2.2.0 -...

org.drools.planner:drools-planner-core (5.4.0.cr1), org.drools.planner:drools-planner-distribution (5.4.0.cr1) +35 more potentially affected by CVE-2014-8125 via org.drools:drools-core (5.4.0.cr1)

org.drools:drools-core MAVEN version 5.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.cr1 - org.drools.planner:drools-planner-distribution 5.4.0.cr1 -...

org.drools.planner:drools-planner-core (5.3.5.final), org.drools.planner:drools-planner-distribution (5.3.5.final) +32 more potentially affected by CVE-2014-8125 via org.drools:drools-core (5.3.5.final)

org.drools:drools-core MAVEN version 5.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.5.final - org.drools.planner:drools-planner-distribution 5.3.5.fin...

Man In The Middle (MitM)

xterm-benchmark is vulnerable to man-in-the-middle. The library does not download its dependency package via secure channel using https, allowing an attacker to intercept the communication...

[SECURITY] Fedora 36 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc36

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

[SECURITY] Fedora 34 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc34

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

[SECURITY] Fedora 35 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc35

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

Code injection

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...