EUVD-2018-0649

Malware in sbrugna...

EUVD-2018-0692

Malware in sbrugna...

OrientDB Studio web management interface is vulnerable to clickjacking attacks

The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

com.orientechnologies:orientdb (1.5.1), com.orientechnologies:orientdb-distributed (1.5.1) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.5.1)

com.orientechnologies:orientdb-server MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.5.1 - com.orientechnologies:orientdb-distributed 1.5...

com.orientechnologies:orientdb-community (1.7.1), com.orientechnologies:orientdb-distributed (1.7.1) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.1)

com.orientechnologies:orientdb-server MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.1 -...

com.orientechnologies:orientdb-community (1.7), com.orientechnologies:orientdb-distributed (1.7) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7)

com.orientechnologies:orientdb-server MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7 - com.orientechnologies:orientdb-distribut...

com.orientechnologies:orientdb-community (1.7.8), com.orientechnologies:orientdb-distributed (1.7.8) +3 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.8)

com.orientechnologies:orientdb-server MAVEN version 1.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.8 -...

com.orientechnologies:orientdb-community (1.7.2), com.orientechnologies:orientdb-distributed (1.7.2) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.2)

com.orientechnologies:orientdb-server MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.2 -...

com.orientechnologies:orientdb-community (1.7.9), com.orientechnologies:orientdb-distributed (1.7.9) +3 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.9)

com.orientechnologies:orientdb-server MAVEN version 1.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.9 -...

com.orientechnologies:orientdb-community (1.7.7), com.orientechnologies:orientdb-distributed (1.7.7) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.7)

com.orientechnologies:orientdb-server MAVEN version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.7 -...

com.orientechnologies:orientdb-community (1.7.3), com.orientechnologies:orientdb-distributed (1.7.3) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.3)

com.orientechnologies:orientdb-server MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.3 -...

com.orientechnologies:orientdb-distributed (1.6.1), com.orientechnologies:orientdb-graphdb (1.6.1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.1)

com.orientechnologies:orientdb-server MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.1 -...

com.orientechnologies:orientdb-community (1.7.5), com.orientechnologies:orientdb-distributed (1.7.5) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.5)

com.orientechnologies:orientdb-server MAVEN version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.5 -...

GHSA-V6WR-FCH2-VM5W OrientDB Server Community Edition uses insufficiently random values to generate session IDs

OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values in the server/network/protocol/http/OHttpSessionManager.java, which makes it easier for remote attackers to predict a value by...

com.orientechnologies:orientdb-community (1.7.10), com.orientechnologies:orientdb-distributed (1.7.10) +4 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.10)

com.orientechnologies:orientdb-server MAVEN version 1.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.10 -...

com.orientechnologies:orientdb-community (1.7.6), com.orientechnologies:orientdb-distributed (1.7.6) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.6)

com.orientechnologies:orientdb-server MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.6 -...

com.orientechnologies:orientdb (1.3.0), com.orientechnologies:orientdb-distributed (1.3.0) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.3.0)

com.orientechnologies:orientdb-server MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.3.0 - com.orientechnologies:orientdb-distributed 1.3...

com.orientechnologies:orientdb (1.4.0), com.orientechnologies:orientdb-distributed (1.4.0) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.4.0)

com.orientechnologies:orientdb-server MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.4.0 - com.orientechnologies:orientdb-distributed 1.4...

com.orientechnologies:orientdb-distributed (1.6.2), com.orientechnologies:orientdb-graphdb (1.6.2) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.2)

com.orientechnologies:orientdb-server MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.2 -...

com.orientechnologies:orientdb-distributed (1.6.3), com.orientechnologies:orientdb-graphdb (1.6.3) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.3)

com.orientechnologies:orientdb-server MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.3 -...