EUVD-2022-44458

Malicious code in bioql PyPI...

EUVD-2022-44457

Malicious code in bioql PyPI...

CVE-2022-41217

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage...

CVE-2022-41216

Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system...

com.github.j5ik2o:akka-persistence-dynamodb-kafka-write-adaptor_2.12 (1.1.0), com.github.j5ik2o:akka-persistence-kafka-awesome_2.12 (1.0.0) +6 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (2.0.2)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.github.j5ik2o:akka-persistence-dynamodb-kafka-write-adaptor2.12 1.1.0 -...

com.lightbend.cloudflow:cloudflow-akka-testkit_2.12 (>=0.0.0.1-release, <=1.3.0), com.lightbend.cloudflow:cloudflow-akka-tests_2.12 (>=0.0.0.1-release, <=1.3.0) +12 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (1.1.0)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.lightbend.cloudflow:cloudflow-akka-testkit2.12 =0.0.0.1-release,...

com.lightbend.akka:akka-projection-kafka_2.12 (>=1.0.0-rc1, <=1.0.0-rc3), com.lightbend.cloudflow:cloudflow-akka-testkit_2.12 (>=2.0.8-rc1, <=2.0.10) +5 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (2.0.4)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.lightbend.akka:akka-projection-kafka2.12 =1.0.0-rc1, =2.0.8-rc1, =2.0.8-rc1,...

CVE-2022-41216

Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system...

CVE-2022-41217

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage...

CVE-2022-41217

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage...

CVE-2022-41216

Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system...

Unrestricted file upload

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage...

Remote file inclusion

Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system...

CVE-2022-41216 Cloudflow - Local File Inclusion Vulnerability

Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system...

CVE-2022-41216

Technical details (affected product versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

CVE-2022-41217

Cloudflow (CVE-2022-41217) suffers an unauthenticated file upload vulnerability affecting the CLOUDFLOW PROOFSCOPE built-in storage. The issue enables an attacker to upload malicious files without authentication, with CVSS v3.1 metrics indicating Network access, Low attack complexity, No privileg...

CVE-2022-41217 Cloudflow - Unauthenticated file upload vulnerability

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage...

CVE-2022-41217 Cloudflow - Unauthenticated file upload vulnerability

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage...

HYBRID Software Cloudflow Path Traversal Vulnerability

HYBRID Software Cloudflow is a modular production workflow suite for print document processing, asset management, soft proofing and workflow automation from HYBRID Software. A security vulnerability exists in HYBRID Software Cloudflow that stems from a local file inclusion vulnerability. An...

HYBRID Software Cloudflow code-related vulnerabilities

HYBRID Software Cloudflow is a modular production workflow suite for print document processing, asset management, soft proofing and workflow automation from HYBRID Software. A security vulnerability exists in Hybrid Software Cloudflow that stems from the presence of a file upload vulnerability. A...