com.hazelcast:hazelcast-all (1.8.4), com.hazelcast:hazelcast-client (1.8.4) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.8.4)

com.hazelcast:hazelcast MAVEN version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.8.4 - com.hazelcast:hazelcast-client 1.8.4 - com.hazelcast:hazelcast-hibernate 1.8....

com.hazelcast:hazelcast-all (1.9), com.hazelcast:hazelcast-client (1.9) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9)

com.hazelcast:hazelcast MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9 - com.hazelcast:hazelcast-client 1.9 - com.hazelcast:hazelcast-hibernate 1.9 -...

com.hazelcast:hazelcast-all (1.9.2.1), com.hazelcast:hazelcast-client (1.9.2.1) +8 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.2.1)

com.hazelcast:hazelcast MAVEN version 1.9.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.2.1 - com.hazelcast:hazelcast-client 1.9.2.1 - com.hazelcast:hazelcast-hibernat...

com.hazelcast:hazelcast-all (1.9.3.3), com.hazelcast:hazelcast-client (1.9.3.3) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.3.3)

com.hazelcast:hazelcast MAVEN version 1.9.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.3.3 - com.hazelcast:hazelcast-client 1.9.3.3 - com.hazelcast:hazelcast-hibernat...

com.hazelcast:hazelcast-all (1.9.2), com.hazelcast:hazelcast-client (1.9.2) +8 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.2)

com.hazelcast:hazelcast MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.2 - com.hazelcast:hazelcast-client 1.9.2 - com.hazelcast:hazelcast-hibernate 1.9....

com.hazelcast:hazelcast-all (1.9.3.4), com.hazelcast:hazelcast-client (1.9.3.4) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.3.4)

com.hazelcast:hazelcast MAVEN version 1.9.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.3.4 - com.hazelcast:hazelcast-client 1.9.3.4 - com.hazelcast:hazelcast-hibernat...

com.hazelcast:hazelcast-all (1.9.1-rc2), com.hazelcast:hazelcast-client (1.9.1-rc2) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.1-rc2)

com.hazelcast:hazelcast MAVEN version 1.9.1-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.1-rc2 - com.hazelcast:hazelcast-client 1.9.1-rc2 -...

Security Bulletin: Follow-redirects is vulnerable to CVE-2023-26159 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses follow-redirects which is vulnerable to CVE-2023-26159. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-26159 DESCRIPTION: follow-redirects could allow a remote attacker to...

Security Bulletin: urllib3 is vulnerable to CVE-2023-45803 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses urllib3 which is vulnerable to CVE-2023-45803. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-45803 DESCRIPTION: urllib3 could allow a remote authenticated attacker to obta...

Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to CVE-2023-46158 and CVE-2023-44483 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses IBM WebSphere Application Server Liberty which is vulnerable to CVE-2023-46158 and CVE-2023-44483. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM...

Security Bulletin: Netty-codec-http2 is vulnerable to CVE-2023-44487 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses netty-codec-http2 which is vulnerable to CVE-2023-44487. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-44487 DESCRIPTION: Multiple vendors are vulnerable to a denial of...

Security Bulletin: Axios is vulnerable to CVE-2023-45857 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses Axios which is vulnerable to CVE-2023-45857. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-45857 DESCRIPTION: Axios is vulnerable to cross-site request forgery, caused by...

Mozilla: Bypass Email Verification on Add Email Monitoring

A security vulnerability has been identified in the email verification process of Mozilla Monitor. The issue allowed attackers to bypass the email verification step when adding a new email address for monitoring. The vulnerability was exploited by obtaining the verification token from the server...

CVE-2023-51653

Hertzbeat is a real-time monitoring system. In the implementation of "JmxCollectImpl.java", "JMXConnectorFactory.connect" is vulnerable to JNDI injection. The corresponding interface is "/api/monitor/detect". If there is a URL field, the address will be used by default. When the URL is...

Intel Performance Counter Monitor Buffer Overflow DoS

The vulnerability of the Intel Performance Counter Monitor software lies in the violation of the buffer’s initial limit. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2023-51653: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Hertzbeat is a real-time monitoring system. In the implementation of JmxCollectImpl.java, JMXConnectorFactory.connect is vulnerable to JNDI injection. The corresponding interface is /api/monitor/detect. If there is a URL field, the address will be used by default. When the URL is...

PT-2024-14225 · Hertzbeat · Hertzbeat

Name of the Vulnerable Software and Affected Versions: Hertzbeat versions prior to 1.4.1 Description: Hertzbeat is a real-time monitoring system. In the implementation of JmxCollectImpl.java, JMXConnectorFactory.connect is vulnerable to JNDI injection. The corresponding interface is...

DEBIAN-CVE-2023-49100

Trusted Firmware-A TF-A before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdeiinterruptbind. The parameter is passed to a call to platicgetinterrupttype. It can be any arbitrary value passing...

UBUNTU-CVE-2023-49100

Trusted Firmware-A TF-A before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdeiinterruptbind. The parameter is passed to a call to platicgetinterrupttype. It can be any arbitrary value passing...

Security Bulletin: Scipy is vulnerable to CVE-2023-25399 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses scipy which is vulnerable to CVE-2023-25399. Vulnerability Details CVEID:CVE-2023-25399 DESCRIPTION: SciPy is vulnerable to a denial of service, caused by a memory leak flaw in the PyFindObjects function due to new reference is not...