abi-ds-utils (>=0.1.2 <=0.1.9), abi-pyspark-utils (>=0.1.1 <=0.1.4) +119 more potentially affected by CVE-2021-38296 via pyspark (>=2.1.2 <=3.1.2)

pyspark PYPI version =2.1.2, =0.1.2, =0.1.1, =0.5.1, =0.2.0, =1.0.0, =0.9.1, =0.1.57, =0.11.0, =0.14.0b20211027, =2.0.0, =2.5.0b20240324 and more Source cves: CVE-2021-38296 Source advisory: OSV:GHSA-9RR6-JPG7-9JG6...

CVE-2022-0022

Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator and local user accounts are not created with a sufficient level of computational effort, which allows for password cracking attacks on accounts in normal non-FIPS-CC operationa...

SMS PVA Part 3: Countries Most Impacted by Service

In this final part, we discuss the countries most affected by SMS PVA services as well as lay out several recommendations to mitigate the risks of such threats...

ai.hyacinth.framework:core-service-jpa-support (>=0.5.2 <=0.5.21), ai.hyacinth.framework:core-service-trigger-server (>=0.5.2 <=0.5.21) +6081 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (>=3.3.0.CR1 <=5.3.17.Final)

org.hibernate:hibernate-core MAVEN version =3.3.0.CR1, =0.5.2, =0.5.2, =1.0.0, =1.0.0, =1.0.1, =1.0.1, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.6 and more Source cves: CVE-2019-14900 Source advisory: OSV:GHSA-8GRG-Q944-CCH5...

animl (>=1.1.2 <=1.1.4), audio-classification-models (=1.0.1) +7 more potentially affected by CVE-2022-21729 via tensorflow-gpu (>=2.6.0 <=2.6.2)

tensorflow-gpu PYPI version =2.6.0, =1.1.2, =0.1.5, =0.1.0, =0.9.0, =1.0.5, =1.0.6 Source cves: CVE-2022-21729 Source advisory: OSV:GHSA-34F9-HJFQ-RR8J...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +102 more potentially affected by CVE-2022-21725 via tensorflow-cpu (>=1.15.0 <=2.4.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2022-21725 Source advisory: OSV:GHSA-V3F7-J968-4H5F...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +171 more potentially affected by CVE-2022-23558 via tensorflow-gpu (>=1.10.1 <=2.5.1)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.0.9, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 - cctv-analysis =0.0.2 and more Source cves: CVE-2022-23558 Source advisory: OSV:GHSA-9GWQ-6CWJ-47H3...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +102 more potentially affected by CVE-2022-23570 via tensorflow-cpu (>=1.15.0 <=2.4.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2022-23570 Source advisory: OSV:GHSA-9P77-MMRW-69C7...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +171 more potentially affected by CVE-2022-23587 via tensorflow-gpu (>=1.10.1 <=2.5.1)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.0.9, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 - cctv-analysis =0.0.2 and more Source cves: CVE-2022-23587 Source advisory: OSV:GHSA-8JJ7-5VXC-PG2Q...

PT-2022-15513 · Sap · Sap Web Dispatcher +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP Kernel and ABAP Platform Kernel versions 7.22, 7.22EXT, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 8.04 Description: The software does not sufficiently validate sap-passport information, which could le...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +171 more potentially affected by CVE-2022-23558 via tensorflow-gpu (>=1.10.1 <=2.5.1)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.0.9, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 - cctv-analysis =0.0.2 and more Source cves: CVE-2022-23558 Source advisory: OSV:PYSEC-2022-122...

animl (>=1.1.2 <=1.1.4), audio-classification-models (=1.0.1) +7 more potentially affected by CVE-2022-23577 via tensorflow-gpu (>=2.6.0 <=2.6.2)

tensorflow-gpu PYPI version =2.6.0, =1.1.2, =0.1.5, =0.1.0, =0.9.0, =1.0.5, =1.0.6 Source cves: CVE-2022-23577 Source advisory: OSV:PYSEC-2022-141...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +171 more potentially affected by CVE-2022-23583 via tensorflow-gpu (>=1.10.1 <=2.5.1)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.0.9, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 - cctv-analysis =0.0.2 and more Source cves: CVE-2022-23583 Source advisory: OSV:PYSEC-2022-147...

CVE-2021-46446

H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=adminaccessgroupedit&aagID...

RPD:bmc-rpd (=1.1), ae.teletronics.nlp:entityextraction (>=1.3 <=1.4) +40407 more potentially affected by CVE-2022-23302 via log4j:log4j (>=1.1.3 <=1.2.17)

log4j:log4j MAVEN version =1.1.3, =1.3, =0.0.5, =1.0.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.2.10 and more Source cves: CVE-2022-23302 Source advisory: OSV:GHSA-W9P3-5CR8-M3JJ...

cloud.piranha.extension:piranha-extension-hazelcast (>=21.11.0 <=22.1.0), cn.vertxup:vertx-co (=0.7.0) +84 more potentially affected by unknown CVE via com.hazelcast:hazelcast (>=5.0 <=5.0.1)

com.hazelcast:hazelcast MAVEN version =5.0, =21.11.0, =22.1.0 - cn.vertxup:vertx-co =0.7.0 - cn.vertxup:vertx-ifx =0.7.0 - cn.vertxup:vertx-import =0.7.0 - cn.vertxup:vertx-pin =0.7.0 - cn.vertxup:vertx-rx =0.7.0 - cn.vertxup:vertx-tp =0.7.0 - cn.vertxup:vertx-up =0.7.0 - cn.vertxup:zero-ambient...

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 08cms (=1.0.0) +17632 more potentially affected by CVE-2022-25758 via scss-tokenizer (>=0.1.2 <=0.4.2)

scss-tokenizer NPM version =0.1.2, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages =0.2.0 and more Source cves: CVE-2022-25758 Source advisory: SNYK:JS-SCSSTOKENIZER-2339884...

org.http4s:jawn-fs2_3.0.0-M2 (>=1.0.1 <=1.0.1-RC3), org.typelevel:jawn-ast_3.0.0-M2 (>=1.0.2 <=1.0.3) +5 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_3.0.0-M2 (>=1.0.2 <=1.0.3)

org.typelevel:jawn-parser3.0.0-M2 MAVEN version =1.0.2, =1.0.1, =1.0.2, =2.0.0-RC1, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3 Source cves: CVE-2022-21653 Source advisory: OSV:GHSA-VC89-HCCF-RQ55...

abomonation_derive (>=0.1.0 <=0.5.0), abomonation_derive_ng (=0.1.0) +30 more potentially affected by CVE-2021-45708 via abomonation (>=0.4.6 <=0.7.3)

abomonation CARGO version =0.4.6, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.2, =0.1.0, =0.2.0, =0.3.1 and more Source cves: CVE-2021-45708 Source advisory: OSV:GHSA-5VWC-R48G-WJ6C...

Path traversal

Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based produc...