EUVD-2018-0692

Malware in sbrugna...

EUVD-2018-0649

Malware in sbrugna...

OrientDB Studio web management interface is vulnerable to clickjacking attacks

The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

com.orientechnologies:orientdb-distributed (1.6.4), com.orientechnologies:orientdb-graphdb (1.6.4) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.4)

com.orientechnologies:orientdb-server MAVEN version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.4 -...

com.orientechnologies:orientdb (1.5.1), com.orientechnologies:orientdb-distributed (1.5.1) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.5.1)

com.orientechnologies:orientdb-server MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.5.1 - com.orientechnologies:orientdb-distributed 1.5...

com.orientechnologies:orientdb (1.2.0), com.orientechnologies:orientdb-distributed (1.2.0) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.2.0)

com.orientechnologies:orientdb-server MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.2.0 - com.orientechnologies:orientdb-distributed 1.2...

com.orientechnologies:orientdb (1.3.0), com.orientechnologies:orientdb-distributed (1.3.0) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.3.0)

com.orientechnologies:orientdb-server MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.3.0 - com.orientechnologies:orientdb-distributed 1.3...

com.orientechnologies:orientdb-community (1.7.4), com.orientechnologies:orientdb-distributed (1.7.4) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.4)

com.orientechnologies:orientdb-server MAVEN version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.4 -...

com.orientechnologies:orientdb-distributed (1.6.2), com.orientechnologies:orientdb-graphdb (1.6.2) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.2)

com.orientechnologies:orientdb-server MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.2 -...

com.orientechnologies:orientdb-community (1.7.8), com.orientechnologies:orientdb-distributed (1.7.8) +3 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.8)

com.orientechnologies:orientdb-server MAVEN version 1.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.8 -...

com.orientechnologies:orientdb (1.0rc9) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.0rc9)

com.orientechnologies:orientdb-server MAVEN version 1.0rc9 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.0rc9 Source cves: CVE-2015-2913 Source advisory:...

com.orientechnologies:orientdb-community (1.6.5), com.orientechnologies:orientdb-distributed (1.6.5) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.5)

com.orientechnologies:orientdb-server MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.6.5 -...

com.orientechnologies:orientdb (1.1.0), com.orientechnologies:orientdb-distributed (1.1.0) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.1.0)

com.orientechnologies:orientdb-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.1.0 - com.orientechnologies:orientdb-distributed 1.1...

com.orientechnologies:orientdb-community (>=2.0.2, <=2.0.14), com.orientechnologies:orientdb-distributed (>=2.0-m1, <=2.0.14) +20 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (>=2.0-m1, <=2.0.14)

com.orientechnologies:orientdb-server MAVEN version =2.0-m1, =2.0.2, =2.0-m1, =2.0-m3, =2.0-m1, =2.0-m3, =2.0-m1, =2.0.14 - io.cobweb:cobweb 1.0 - org.ops4j.orient.samples:orient-sample1 0.3.0 - org.ops4j.orient.samples:orient-sample2 0.3.0 - org.ops4j.orient:orient-ra 0.3.0 -...

com.orientechnologies:orientdb-distributed (1.7-rc1), com.orientechnologies:orientdb-graphdb (1.7-rc1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7-rc1)

com.orientechnologies:orientdb-server MAVEN version 1.7-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.7-rc1 -...

com.orientechnologies:orientdb-community (1.6.6), com.orientechnologies:orientdb-distributed (1.6.6) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.6)

com.orientechnologies:orientdb-server MAVEN version 1.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.6.6 -...

com.orientechnologies:orientdb (1.0) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.0)

com.orientechnologies:orientdb-server MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.0 Source cves: CVE-2015-2913 Source advisory:...

com.orientechnologies:orientdb-community (1.7), com.orientechnologies:orientdb-distributed (1.7) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7)

com.orientechnologies:orientdb-server MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7 - com.orientechnologies:orientdb-distribut...

com.orientechnologies:orientdb (1.4.1), com.orientechnologies:orientdb-distributed (1.4.1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.4.1)

com.orientechnologies:orientdb-server MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.4.1 - com.orientechnologies:orientdb-distributed 1.4...

com.orientechnologies:orientdb (1.5.0), com.orientechnologies:orientdb-distributed (1.5.0) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.5.0)

com.orientechnologies:orientdb-server MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.5.0 - com.orientechnologies:orientdb-distributed 1.5...