Lucene search
+L

1907 matches found

Fedora
Fedora
added 2024/03/07 10:33 p.m.29 views

[SECURITY] Fedora 40 Update: guava-32.1.3-5.fc40

Guava is a suite of core and expanded libraries that include utility classes, Google=EF=BF=BD=EF=BF=BD=EF=BF=BDs collections, io classes, and much much more. This project is a complete packaging of all the Guava libraries into a single jar. Individual portions of Guava can be used by downloading...

8.8CVSS9.1AI score0.02578EPSS
SaveExploits3
Fedora
Fedora
added 2024/03/07 10:32 p.m.28 views

[SECURITY] Fedora 40 Update: aqute-bnd-6.3.1-10.fc40

The bnd tool helps you create and diagnose OSGi bundles. The key functions are: - Show the manifest and JAR contents of a bundle - Wrap a JAR so that it becomes a bundle - Create a Bundle from a specification and a class path - Verify the validity of the manifest entries The tool is capable of...

8.8CVSS7AI score0.02578EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2024/03/06 3:27 p.m.512 views

Exploit for Authentication Bypass by Primary Weakness in Progress Openedge

CVE-2024-1403 Progress OpenEdge Authentication Bypass An explo...

10CVSS9.7AI score0.033EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.53 views

openSUSE: Security Advisory for MozillaThunderbird (SUSE-SU-2023:3228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.12484EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.33 views

openSUSE: Security Advisory for java (SUSE-SU-2023:3023-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.01812EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/02/26 12:00 a.m.15 views

JetBrains TeamCity Path Traversal Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a path traversal...

5.3CVSS7.1AI score0.31977EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/16 8:17 a.m.141 views

Security Bulletin: IBM Event Processing is vulnerable to a denial of service (CVE-2023-4043).

Summary IBM Event Processing is vulnerable to a denial of service due to parsson-1.1.2.jar component. Parsson provides an implementation of Jakarta JSON Processing Specification. Vulnerability Details CVEID:CVE-2023-4043 DESCRIPTION: Eclipse Parsson is vulnerable to a denial of service, caused by...

7.5CVSS6.4AI score0.00764EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/16 8:14 a.m.37 views

Security Bulletin: IBM Event Endpoint Management is vulnerable to a denial of service (CVE-2023-4043).

Summary IBM Event Endpoint Management is vulnerable to a denial of service due to parsson-1.1.2.jar component. Parsson is an implementation of Jakarta JSON Processing specification. Vulnerability Details CVEID:CVE-2023-4043 DESCRIPTION: Eclipse Parsson is vulnerable to a denial of service, caused...

7.5CVSS6.4AI score0.00764EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/02/16 12:00 a.m.16 views

Hibernate Validator JAR Detection

Binary data hibernatevalidatorjardetection.nbin...

7.3AI score
SaveExploits0References1
OSV
OSV
added 2024/02/09 6:31 p.m.25 views

GHSA-37VR-VMG4-JWPW Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected version...

8.8CVSS5.9AI score0.83719EPSS
SaveExploits4References8
Prion
Prion
added 2024/02/09 6:15 p.m.54 views

Design/Logic Flaw

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

6.5CVSS7.4AI score0.83719EPSS
SaveExploits4References2Affected Software1
UbuntuCve
UbuntuCve
added 2024/02/09 6:15 p.m.64 views

CVE-2023-50386

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.8CVSS6.8AI score0.83719EPSS
SaveExploits4References3
OSV
OSV
added 2024/02/09 6:15 p.m.20 views

UBUNTU-CVE-2023-50386

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.8CVSS6.8AI score0.83719EPSS
SaveExploits4References4
Cvelist
Cvelist
added 2024/02/09 5:28 p.m.54 views

CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

9.1AI score0.83719EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2024/02/09 12:00 a.m.41 views

JetBrains TeamCity < 2023.11.3 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2023.11.3. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives CVE-2024-24942 - In JetBrains TeamCity before 2023.11.3...

9.8CVSS7AI score0.5373EPSS
SaveExploits0References3
NVD
NVD
added 2024/02/06 10:15 a.m.35 views

CVE-2024-24942

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives...

5.3CVSS5.8AI score0.31977EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/06 10:15 a.m.9 views

CVE-2024-24942

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives...

5.3CVSS5.8AI score0.31977EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/06 10:15 a.m.31 views

Path traversal

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives...

5CVSS7.2AI score0.31977EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/02/06 9:21 a.m.98 views

CVE-2024-24942

CVE-2024-24942 affects JetBrains TeamCity versions prior to 2023.11.3. The vulnerability is a path traversal in JAR archives that allows reading data from within JAR files. Public sources in the connected documents consistently describe the issue as a path traversal vulnerability in TeamCity lead...

5.3CVSS5.3AI score0.31977EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/06 9:21 a.m.57 views

CVE-2024-24942

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives...

5.3CVSS6.6AI score0.31977EPSS
SaveExploits0References1
Rows per page
Query Builder