EUVD-2005-4702

Malware in sbrugna...

EUVD-2022-1875

Malicious code in bioql PyPI...

io.quarkus:quarkus-elytron-security-oauth2 (>=2.3.0.cr1, <=2.3.1.final), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=2.3.0.cr1, <=2.3.1.final) +58 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.17.0.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.17.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - io.quarkus:quarkus-elytron-security-oauth2 =2.3.0.cr1,...

GHSA-2259-H742-5VR4 JBoss EJB Client information disclosure vulnerability

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality...

org.jboss:jboss-remote-naming (1.0.0.beta4) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.0.beta12)

org.jboss:jboss-ejb-client MAVEN version 1.0.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss:jboss-remote-naming 1.0.0.beta4 Source cves: CVE-2021-20250 Source advisory:...

ch.inftec.ju:ju-testing-ee (>=4.1, <=4.2), org.jboss:jboss-remote-naming (>=1.0.0.final, <=1.0.5.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.0.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-testing-ee =4.1, =1.0.0.final, =1.0.5.final Source cves: CVE-2021-20250 Source...

org.jboss.as:jboss-as-ejb-client-bom (7.1.0.final), org.jboss.as:jboss-as-jms-client-bom (7.1.0.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.2.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.0.final - org.jboss.as:jboss-as-jms-client-bom 7.1.0.final...

ch.inftec.ju:ju-testing-ee (>=4.4-4, <=4.5.1-11), ch.inftec.ju:ju-util-ee (>=4.4-4, <=4.5.1-11) +6 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.5.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-testing-ee =4.4-4, =4.4-4, =0.2.4, =0.2.9, =0.3.0 Source cves: CVE-2021-20250 Source...

org.jboss.as:jboss-as-ejb-client-bom (7.1.2.final), org.jboss.as:jboss-as-jms-client-bom (7.1.2.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.10.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.2.final - org.jboss.as:jboss-as-jms-client-bom 7.1.2.final...

org.jboss.as:jboss-as-ejb-client-bom (7.1.3.final), org.jboss.as:jboss-as-jms-client-bom (7.1.3.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.11.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.3.final - org.jboss.as:jboss-as-jms-client-bom 7.1.3.final...

org.jboss:jboss-remote-naming (>=1.0.6.final, <=2.0.0.beta2) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.13.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.13.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss:jboss-remote-naming =1.0.6.final, =2.0.0.beta2 Source cves: CVE-2021-20250 Source advisory...

ch.inftec.ju:ju-util-ee (>=4.1, <=4.2), com.github.marschall:osgi-remoting-ejb-jboss (0.2.0) +7 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.16.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-util-ee =4.1, =3.0.39, =3.0.39, =3.0.53, =3.0.53, =7.1.83 Source cves: CVE-2021-2025...

org.wildfly:wildfly-ee (8.0.0.alpha1), org.wildfly:wildfly-ejb-client-bom (8.0.0.alpha1) +8 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.21.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.21.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-ee 8.0.0.alpha1 - org.wildfly:wildfly-ejb-client-bom 8.0.0.alpha1 -...

org.wildfly:wildfly-ee (8.0.0.alpha2), org.wildfly:wildfly-ejb-client-bom (8.0.0.alpha2) +8 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.22.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.22.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-ee 8.0.0.alpha2 - org.wildfly:wildfly-ejb-client-bom 8.0.0.alpha2 -...

org.wildfly:wildfly-arquillian-common-domain (>=8.0.0.alpha3, <=8.0.0.beta1), org.wildfly:wildfly-arquillian-container-domain-managed (>=8.0.0.alpha3, <=8.0.0.beta1) +14 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.0.beta3)

org.jboss:jboss-ejb-client MAVEN version 2.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-arquillian-common-domain =8.0.0.alpha3, =8.0.0.alpha3, =8.0.0.alpha3,...

org.javafxdata:datafx-ejb-wildfly (8.0b1), org.javafxdata:datafx-samples (8.0b1) +25 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.0.beta5)

org.jboss:jboss-ejb-client MAVEN version 2.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.javafxdata:datafx-ejb-wildfly 8.0b1 - org.javafxdata:datafx-samples 8.0b1 -...

org.wildfly:wildfly-client-all (9.0.0.alpha1), org.wildfly:wildfly-clustering-ejb-spi (>=8.1.0.cr1, <=9.0.0.alpha1) +2 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-client-all 9.0.0.alpha1 - org.wildfly:wildfly-clustering-ejb-spi =8.1.0.cr1,...

org.wildfly:wildfly-batch (>=9.0.0.beta1, <=9.0.0.cr1), org.wildfly:wildfly-batch-parent (>=9.0.0.beta1, <=9.0.0.cr1) +21 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.3.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-batch =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1,...

com.logitags:cibet-integrationtest (>=2.2, <=2.2.2), org.fakereplace:fakereplace-wildfly-tests (1.0.0.alpha3) +25 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - com.logitags:cibet-integrationtest =2.2, =8.0.0.beta2, =8.0.0.beta1, =8.0.0.beta2, =9.0.0.cr2,...

org.infinispan.server:infinispan-server-commons (>=8.1.0.alpha1, <=8.1.0.alpha2), org.infinispan.server:infinispan-server-infinispan (>=8.1.0.alpha1, <=8.1.0.alpha2) +26 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.2.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.infinispan.server:infinispan-server-commons =8.1.0.alpha1, =8.1.0.alpha1, =8.1.0.alpha1,...