brainhance (=0.0.1), crystal4d (>=0.0.4 <=0.1.2) +4 more potentially affected by CVE-2021-37673 via tensorflow-gpu (>=2.4.0 <=2.4.2)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =0.1.0.dev98, =1.0.0, =1.0.1 - tf-yarn-gpu =0.6.3 Source cves: CVE-2021-37673 Source advisory: OSV:GHSA-278G-RQ84-9HMG...

Improper Control of Generation of Code ('Code Injection')

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream SCSt microservice. arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and all users are advised to upda...

GHSA-R6JX-9G48-2R5R

creationtimestamp| type| source ---|---|--- 2021-08-23 18:03:31+00:00| published-proof-of-concept| https://t.me/cKure/6729 2021-08-25 12:12:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4150...

GHSA-6XX3-RG99-GC3P vulnerabilities

Vulnerabilities for packages: elasticsearch, hadoop-fips...

CVE-2021-37694

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream SCSt microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and al...

Code injection

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream SCSt microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and al...

CVE-2021-37694 Code injection issue for java-spring-cloud-stream-template

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream SCSt microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and al...

Zope RCE Vulnerability (GHSA-g4gq-j4p2-j8fr)

Zope is prone to a remote code execution RCE vulnerability via Script Python objects under Python 3. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

GHSA-FP52-QW33-MFMW vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-C72P-9XMJ-RX3W vulnerabilities

Vulnerabilities for packages: ctop...

GHSA-8H2G-R292-J8XH vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-25GF-8QRR-G78R vulnerabilities

Vulnerabilities for packages: k3d...

Eclipse Jetty Information Disclosure Vulnerability (GHSA-vjv5-gp2w-65vm) - Windows

Eclipse Jetty is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"...

Eclipse Jetty Information Disclosure Vulnerability (GHSA-vjv5-gp2w-65vm) - Linux

Eclipse Jetty is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"...

CVE-2021-34429

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc...

BeerHolderBot (>=0.1.0 <=0.3.6), GetPDB (>=0.1.0 <=1.0.1) +5225 more potentially affected by CVE-2021-32714 via hyper (>=0.0.1 <=0.13.7)

hyper CARGO version =0.0.1, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.2.0-alpha.0 and more Source cves: CVE-2021-32714 Source advisory: OSV:GHSA-5H46-H7HH-C6X9...

GHSA-XXX5-8MVQ-3528

creationtimestamp| type| source ---|---|--- 2021-07-08 18:06:55+00:00| seen| https://t.me/linkersec/93...

GHSA-CJJC-XP8V-855W vulnerabilities

Vulnerabilities for packages: dex-k8s-authenticator, k3d...

GHSA-56HP-XQP3-W2JF

creationtimestamp| type| source ---|---|--- 2021-06-17 08:20:29+00:00| seen| Telegram/x7kX4PZBtnGuQa2DJABTToNpcoCdFXitU976Bw1W0XFRyo...

elFinder < 2.1.59 Multiple Vulnerabilities (GHSA-wph3-44rj-92pr)

elFinder is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:std42:elfinder"; ifdescription...