ch.qos.logback:log4j-bridge (0.8), ch.qos.logback:logback-examples (0.8) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.8)

ch.qos.logback:logback-classic MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.8 - ch.qos.logback:logback-examples 0.8 Source cves: CVE-2023-6378 Sour...

ch.qos.logback:log4j-bridge (0.7.1), ch.qos.logback:logback-examples (0.7.1) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.7.1)

ch.qos.logback:logback-classic MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.7.1 - ch.qos.logback:logback-examples 0.7.1 Source cves: CVE-2023-637...

ch.qos.logback:logback-examples (0.9.26), com.axibase:aggregation-log-filter (>=0.1.1, <=0.4.13) +118 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.26)

ch.qos.logback:logback-classic MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.26 - com.axibase:aggregation-log-filter =0.1.1, =1.0.3, =0.3.1...

ch.qos.logback:log4j-bridge (0.9.4), ch.qos.logback:logback-examples (0.9.4) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.4)

ch.qos.logback:logback-classic MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.4 - ch.qos.logback:logback-examples 0.9.4 Source cves: CVE-2023-637...

ch.qos.logback:logback-examples (0.6) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.6)

ch.qos.logback:logback-classic MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.6 Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F5...

ch.qos.logback:logback-examples (0.9.24), com.alibaba.citrus:citrus-test-all (>=3.0.7, <=3.1.0) +63 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.24)

ch.qos.logback:logback-classic MAVEN version 0.9.24 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.24 - com.alibaba.citrus:citrus-test-all =3.0.7, =1.0.0.4,...

ch.qos.logback:log4j-bridge (0.9.3), ch.qos.logback:logback-examples (0.9.3) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.3)

ch.qos.logback:logback-classic MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.3 - ch.qos.logback:logback-examples 0.9.3 Source cves: CVE-2023-637...

ch.qos.logback:logback-access (0.9.11), ch.qos.logback:logback-classic (0.9.11) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.11)

ch.qos.logback:logback-core MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.11 - ch.qos.logback:logback-classic 0.9.11 -...

ch.qos.logback:log4j-bridge (0.8.1), ch.qos.logback:logback-examples (0.8.1) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.8.1)

ch.qos.logback:logback-classic MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.8.1 - ch.qos.logback:logback-examples 0.8.1 Source cves: CVE-2023-637...

ch.qos.logback:log4j-bridge (0.9.4), ch.qos.logback:logback-access (0.9.4) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.4)

ch.qos.logback:logback-core MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.4 - ch.qos.logback:logback-access 0.9.4 - ch.qos.logback:logback-classic...

ch.hortis.sonar:sonar-commons (0.2), ch.hortis.sonar:sonar-maven-plugin (0.2) +4 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.5)

ch.qos.logback:logback-core MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-commons 0.2 - ch.hortis.sonar:sonar-maven-plugin 0.2 - ch.qos.logback:log4j-bridge...

ch.qos.logback:log4j-bridge (0.9.3), ch.qos.logback:logback-access (0.9.3) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.3)

ch.qos.logback:logback-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.3 - ch.qos.logback:logback-access 0.9.3 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.9.2), ch.qos.logback:logback-examples (0.9.2) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.2)

ch.qos.logback:logback-classic MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.2 - ch.qos.logback:logback-examples 0.9.2 Source cves: CVE-2023-637...

ch.qos.logback:logback-access (0.9.16), ch.qos.logback:logback-classic (0.9.16) +12 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.16)

ch.qos.logback:logback-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.16 - ch.qos.logback:logback-classic 0.9.16 -...

Duplicate Advisory: Apache Superset - Elevation of Privilege

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f678-j579-4xf5. This link is maintained to preserve external references. Original Description Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using th...

CVE-2023-40610

Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL stateme...

Authorization

Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL stateme...

CVE-2023-40610 Apache Superset: Privilege escalation with default examples database

Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL stateme...

PT-2023-27540

Name of the Vulnerable Software and Affected Versions Apache Superset versions up to but excluding 2.1.2 Description The issue is related to an improper authorization check, which could lead to possible privilege escalation. Using the default examples database connection, an attacker could access...

RHEL 8 : qt5-qtsvg (RHSA-2023:6961)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6961 advisory. Scalable Vector Graphics SVG is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displayin...