GHSA-HC39-RJWP-QFFQ Apache Tomcat XSS Vulnerabilities in Examples Web Application

Multiple cross-site scripting XSS vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via...

GHSA-5HGM-QM5M-5VMW Jakarta Tomcat cross-site scripting (XSS) vulnerability

Multiple cross-site scripting XSS vulnerabilities in the 1 examples and 2 ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML...

Undetectable Backdoors in Machine-Learning Models

New paper: "Planting Undetectable Backdoors in Machine Learning Models": Abstract: Given the computational cost and technical expertise required to train machine learning models, users may delegate the task of learning to a service provider. We show how a malicious learner can plant an undetectab...

WordPress Popup Maker 1.16.5 Plugin - Stored Cross-Site Scripting (Authenticated) Vulnerability

Exploit Title: WordPress Plugin Popup Maker Popup Settings Triggers Add New Cookie Add Cookie Time overwrite the default '1 month' with XSS payload Click 'Add' what triggers the XSS payload Payload examples: alert'XSS';...

[SECURITY] Fedora 36 Update: osgearth-3.2-7.fc36

osgEarth is a C++ terrain rendering SDK. Just create a simple XML file, point it at your imagery, elevation, and vector data, load it into your favorite OpenSceneGraph application, and go! osgEarth supports all kinds of data and comes with lots of examples to help you get up and running quickly a...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2021-45229 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2021-45229 Source advisory: OSV:GHSA-65XW-PCQW-HJRH...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2022-24288 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2022-24288 Source advisory: OSV:GHSA-3V7G-4PG3-7R6J...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2022-24288 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2022-24288 Source advisory: OSV:PYSEC-2022-30...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2021-45229 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2021-45229 Source advisory: OSV:PYSEC-2022-29...

org.alluxio:alluxio-core-client (1.2.0), org.alluxio:alluxio-examples (1.2.0) +11 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.2.0)

org.alluxio:alluxio-core-common MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-core-client 1.2.0 - org.alluxio:alluxio-examples 1.2.0 -...

org.alluxio:alluxio-core-client (1.1.1), org.alluxio:alluxio-examples (1.1.1) +10 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.1.1)

org.alluxio:alluxio-core-common MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-core-client 1.1.1 - org.alluxio:alluxio-examples 1.1.1 -...

org.alluxio:alluxio-core-client (1.3.0), org.alluxio:alluxio-examples (1.3.0) +11 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.3.0)

org.alluxio:alluxio-core-common MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-core-client 1.3.0 - org.alluxio:alluxio-examples 1.3.0 -...

org.alluxio:alluxio-core-client (1.1.0), org.alluxio:alluxio-examples (1.1.0) +10 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.1.0)

org.alluxio:alluxio-core-common MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-core-client 1.1.0 - org.alluxio:alluxio-examples 1.1.0 -...

com.datastax.cassandra:cassandra-driver-core (>=1.0.0-beta2, <=1.0.1), com.datastax.cassandra:cassandra-driver-examples-parent (>=1.0.0-beta2, <=1.0.1) +4 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.2.3)

org.apache.cassandra:cassandra-all MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.datastax.cassandra:cassandra-driver-core =1.0.0-beta2, =1.0.0-beta2, =1.0.0-beta2,...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2021-45230 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2021-45230 Source advisory: OSV:GHSA-4JH2-3C85-Q67H...

Mageia: Security Advisory (MGASA-2018-0220)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.javasimon:javasimon-examples (>=2.0, <=2.1) potentially affected by CVE-2022-23221 via com.h2database:h2 (1.1.111)

com.h2database:h2 MAVEN version 1.1.111 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - org.javasimon:javasimon-examples =2.0, =2.1 Source cves: CVE-2022-23221 Source advisory: OSV:GHSA-45HX-WFHJ-473X...

Mirai Botnet Abusing Log4j Vulnerability

Threat Researcher Larry Cashdollar has discovered evidence of the Mirai botnet abusing Log4j vulnerability and shares code examples...

PT-2022-7175

Name of the Vulnerable Software and Affected Versions SysAid versions prior to 22.1.64 SysAid versions prior to 22.2.20 Description The issue is related to an incorrect restriction of a directory path with limited access in the /lib/tinymce/examples/index.html component of the SysAid software. Th...

com.github.lburgazzoli:atomix-boot (>=1.0.1, <=1.0.2), com.github.lburgazzoli:atomix-boot-examples (>=1.0.1, <=1.0.2) +22 more potentially affected by CVE-2020-35216 via io.atomix:atomix (1.0.8)

io.atomix:atomix MAVEN version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - com.github.lburgazzoli:atomix-boot =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =0.1.0, =0.1.0, =0.1.0,...