@commercetools-docs/gatsby-theme-docs (>=0.0.0-canary-20211022203039, <=19.1.0), @dcl/docs-site (>=1.0.0-3010867520.commit-1740972, <=1.0.0-20220919140413.commit-6dee65c) +5 more potentially affected by CVE-2022-25863 via gatsby-plugin-mdx (>=3.2.0, <=3.13.0)

gatsby-plugin-mdx NPM version =3.2.0, =0.0.0-canary-20211022203039, =1.0.0-3010867520.commit-1740972, =1.1.1, =1.18.5, =1.0.2, =1.0.8 - gatsby.webstackbuilders.com 0.1.0 Source cves: CVE-2022-25863 Source advisory: SNYK:JS-GATSBYPLUGINMDX-2405699...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42426 more potentially affected by CVE-2022-0536 via follow-redirects (>=1.0.0, <=1.14.7)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0536 Source advisory: OSV:GHSA-PW2R-VQ6V-HR8C...

a4 (>=0.0.2, <=0.0.4), aaa_csv_challenge (0.1.0) +3960 more potentially affected by unknown CVE via structopt (>=0.0.3, <=0.3.26)

structopt CARGO version =0.0.3, =0.0.2, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0104...

a2kit (>=0.1.0, <=2.0.6), actions-github (>=0.0.2, <=0.1.0) +682 more potentially affected by unknown CVE via json (>=0.3.4, <=0.12.4)

json CARGO version =0.3.4, =0.1.0, =0.0.2, =0.0.1, =0.1.0, =7.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.9.0, =1.0.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0081...

a2 (>=0.3.6, <=0.5.0-alpha.1), abci-storage (0.0.3) +1467 more potentially affected by unknown CVE via owning_ref (>=0.1.4, <=0.4.1)

owningref CARGO version =0.1.4, =0.3.6, =0.1.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0040...

CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

End of CentOS Linux. Where to migrate?

Hello everyone! As you probably know, CentOS Linux, the main Enterprise-level Linux server distribution, will soon disappear. It wasnt hard to predict when RedHat acquired CentOS in 2014, and now it is actually happening. End of life of CentOS Linux 8 was 31.12.2021. There wont be CentOS Linux as...

The Log4j Vulnerability Puts Pressure on the Security World

It’s not my intention to be alarmist about the Log4j vulnerability CVE-2021-44228, known as Log4Shell, but this one is pretty bad. First of all, Log4j is a ubiquitous logging library that is very widely used by millions of computers. Second, the director of the U.S. Cybersecurity & Infrastructure...

CVE-2021-29215

A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in versions: Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to...

CVE-2021-29215

A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in versions: Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to...

CVE-2021-29215

A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in versions: Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to...

CVE-2021-29215

Summary: CVE-2021-29215 affects HPE Ezmeral Data Fabric (TEZ MapR ecosystem component). Vulnerable in TEZ MapR versions prior to Tez-0.8, Tez-0.9, and Tez-0.9.2 (specific builds listed in the initial description). The issue is described as a remote access restriction bypass within the TEZ MapR co...

HPE Ezmeral Data Fabric 安全漏洞

Hpe Ezmeral Data Fabric is a data fabric from Hewlett-Packard Hpe in the United States that combines S3 native objects, files, streams, and databases into a single scalable data platform. A security vulnerability exists in the HPE Ezmeral Data Fabric that could allow bypassing remote access...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9375 more potentially affected by CVE-2021-23382 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23382 Source advisory: OSV:GHSA-566M-QJ78-RWW5...

QNAP Systems QUTS Hero Cross-Site Scripting Vulnerability

QNAP Systems QUTS Hero is a NAS operating system for file management from China Waylink QNAP Systems. The system retains the QTS application ecosystem and integrates a more powerful 128-bit ZFS file system to provide enterprises with a more stable and reliable NAS storage solution.QNAP Systems QU...

@balena/jellyfish-chat-widget (>=0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, <=2.0.0-rendition-notifications-1f10048b0b56657415485386d8bdc09fa8b8ffb0), @balena/jellyfish-ui-components (>=0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, <=2.0.25-add-react-virtualised-to-infinite-list-4e291b52a55f3950254be3ce329926ed26ecc421) +23 more potentially affected by CVE-2021-43861 via mermaid (>=8.4.0, <=8.13.4)

mermaid NPM version =8.4.0, =0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, =0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, =2.0.0-alpha-3d22c22.0, =0.0.3, =0.0.2, =0.0.5, =0.0.29, =0.0.5, =0.8.0, =0.8.0, =0.5.11,...

Apache Parquet Input Validation Error Vulnerability

Apache Parquet is a columnar storage format from the Apache Foundation in the United States. It can be used in any project in the Hadoop ecosystem. An input validation error vulnerability exists in Apache Parquet, which stems from the product's Parquet-MR not validating Parquet files. An attacker...

Are Medical Devices at Risk of Ransomware Attacks?

In May 2017, the first documented ransomware assault on networked medical equipment happened. The worldwide ransomware assault WannaCry compromised radiological and other instruments in several hospitals during its height, after a software failure caused by a cyberattack on its third-party vendor...

adiscord (>=0.0.1, <=0.0.3), alpaca-data-api (>=0.1.0, <=0.1.2) +21 more potentially affected by unknown CVE via dotenv_codegen (>=0.7.2, <=0.15.0)

dotenvcodegen CARGO version =0.7.2, =0.0.1, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.2, =0.7.0, =0.1.0, =0.1.0, =0.3.0 - meep 1.0.1 - ncrsdk 0.1.0 - new-rawr 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0142...

How to Get Started With Application Security

With a comprehensive security stack, Akamai’s application security solutions defend your entire ecosystem from threats. But before you can reap the benefits that come with application security, you need to create a configuration with Akamai’s APIs. Our Developer Advocacy team is here to walk you...