Lucene search
K

11 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/06 5:42 a.m.3 views

Malicious code in jna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0cb95a9ee76c31bf43c34e398b5f5226a4fa58d643a6901667e7736a3c58066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References4
OSV
OSV
added 2025/05/06 5:42 a.m.7 views

MAL-2025-3631 Malicious code in jna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0cb95a9ee76c31bf43c34e398b5f5226a4fa58d643a6901667e7736a3c58066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/18 7:56 a.m.70 views

Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8

Summary Third party reported 'Stored XSS' and 'CSRF' issues, Apache Tomcat, Apache ActiveMQ, CKEditor, libcURL, xmlbeans, scala-library, json-smart, jna-platform, jackson-databind, commons-io, shiro-core, commons-net, snappy-java, xercesImpl are identified as vulnerable components with multiple...

10CVSS9.9AI score0.99999EPSS
Exploits137Affected Software1
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.24 views

Fedora: Security Advisory for jna (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02557EPSS
Exploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.17 views

[SECURITY] Fedora 40 Update: jna-5.14.0-4.fc40

JNA provides Java programs easy access to native shared libraries DLLs on Windows without writing anything but Java code. JNA's design aims to provide native access in a natural way with a minimum of effort. No boilerplate or generated code is required. While some attention is paid to performance...

8.8CVSS7AI score0.02557EPSS
Exploits3
IBM Security Bulletins
IBM Security Bulletins
added 2023/10/06 8:4 a.m.46 views

Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to jna-platform, ant, httpclient, http-cache-semantics

Summary Vulnerabilities in jna-platform, ant, httpclient, http-cache-semantics such as remote attacker to obtain sensitive information, denial of service, remote attacker to bypass security restrictions may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2022-25881 DESCRIPTION: Node....

7.5CVSS7.4AI score0.19312EPSS
Exploits4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/10/04 8:29 a.m.21 views

Security Bulletin: Vulnerability in jna-platform library affects IBM Engineering Lifecycle Optimization - Publishing

Summary This security vulnerablity has been addressed in IBM Engineering Lifecycle Optimization - Publishing newer releases Vulnerability Details IBM X-Force ID: 240628 DESCRIPTION: Java Native Access JNA is vulnerable to a denial of service, caused by an out-of-bounds read flaw in the...

7AI score
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/09/25 10:5 p.m.54 views

Security Bulletin: Vulnerability with kernel , OpenJDK jna-platform affect IBM Cloud Object Storage Systems (Sept2023)

Summary Vulnerability with kernel CVE-2023-2269, CVE-2023-34256, OpenJDK CVE-2023-22041 CVE-2023-22043 CVE-2023-22044 CVE-2023-22006 CVE-2023-22045 CVE-2023-22036 CVE-2023-22049, jna-platform 240628 This vulnerability have been addressed in the latest ClevOS releases Vulnerability Details...

5.9CVSS6.6AI score0.01316EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/02 7:43 a.m.25 views

Security Bulletin: Vulnerabilities in jna-platform library affects IBM Engineering Test Management (ETM)

Summary This Security Vulnerablity has been addressed in IBM Engineering Test Management in newer releases Vulnerability Details IBM X-Force ID: 240628 DESCRIPTION: Java Native Access JNA is vulnerable to a denial of service, caused by an out-of-bounds read flaw in the...

6.8AI score
Exploits0Affected Software1
Rockylinux
Rockylinux
added 2022/05/17 6:50 a.m.10 views

new packages: jna

An update is available for jna. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

2.1AI score
Exploits0
Rockylinux
Rockylinux
added 2019/11/05 5:51 p.m.14 views

jna bug fix and enhancement update

An update is available for jna. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...

2.1AI score
Exploits0
Rows per page
Query Builder