org.wildfly.core:wildfly-core-dist (3.0.0.beta20), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta20) +18 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (3.0.0.beta20)

org.wildfly.core:wildfly-server MAVEN version 3.0.0.beta20 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta20 - org.wildfly.core:wildfly-core-feature-pa...

org.wildfly.core:wildfly-core-dist (3.0.0.alpha13), org.wildfly.core:wildfly-core-feature-pack (3.0.0.alpha13) +16 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (3.0.0.alpha13)

org.wildfly.core:wildfly-server MAVEN version 3.0.0.alpha13 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.alpha13 -...

org.wildfly.core:wildfly-core-dist (5.0.0.alpha3), org.wildfly.core:wildfly-core-feature-pack (5.0.0.alpha3) +17 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (5.0.0.alpha3)

org.wildfly.core:wildfly-server MAVEN version 5.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 5.0.0.alpha3 - org.wildfly.core:wildfly-core-feature-pa...

org.wildfly.core:wildfly-core-dist (5.0.0.alpha5), org.wildfly.core:wildfly-core-feature-pack (5.0.0.alpha5) +17 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (5.0.0.alpha5)

org.wildfly.core:wildfly-server MAVEN version 5.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 5.0.0.alpha5 - org.wildfly.core:wildfly-core-feature-pa...

org.wildfly.core:wildfly-core-dist (3.0.0.beta3), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta3) +17 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (3.0.0.beta3)

org.wildfly.core:wildfly-server MAVEN version 3.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta3 - org.wildfly.core:wildfly-core-feature-pack...

org.wildfly.core:wildfly-core-dist (3.0.6.final), org.wildfly.core:wildfly-core-feature-pack (3.0.6.final) +18 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (3.0.6.final)

org.wildfly.core:wildfly-server MAVEN version 3.0.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.6.final - org.wildfly.core:wildfly-core-feature-pack...

org.wildfly.core:wildfly-core-dist-legacy (12.0.0.beta1), org.wildfly.core:wildfly-core-feature-pack (12.0.0.beta1) +18 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (12.0.0.beta1)

org.wildfly.core:wildfly-server MAVEN version 12.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 12.0.0.beta1 -...

SUSE: Security Advisory (SUSE-SU-2022:2899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3625-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in Java SE related to the JSSE component

Summary Vulnerability found in Java SE related to the JSSE component used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-35603 DESCRIPTION: An unspecified vulnerability in Java SE...

ZipSlip Symlink variant allows to read any file within OctoPrint Box

Using the ZipSlip symlink variant, it is possible to steal any file from the OctoPrint remote server via an upload of a maliciously crafted archive as a language pack and download the stolen files within a backup archive. To set up the Octoprint web application, we used the dockerized version bas...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to Identity Spoofing (CVE-2022-22475)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to Identity Spoofing CVE-2022-22475 Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are...

10-Strike Network Inventory Explorer 9.3 Buffer Overflow Vulnerability

10-Strike Network Inventory Explorer versions 9.3 and below are vulnerable to a SEH based buffer overflow which leads to code execution or local privilege escalation. The vulnerable part of the program is the functionality to add computers from a text file. I. VULNERABILITY...

Security Bulletin: Security vulnerabilities have been identified in IBM® DB2® shipped with IBM System Networking Element Manager (CVE-2013-6747, CVE-2014-0963)

Summary IBM DB2 is shipped as a component of IBM System Networking Element Manager. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM® DB2® is impacted by multiple TLS/SSL security...

Security Bulletin: Tivoli Storage Productivity Center is affected by the following OpenSSL vulnerabilities: CVE-2013-4353, CVE-2013-6449, CVE-2013-6450

Summary Security vulnerabilities have been discovered in OpenSSL that were reported by the OpenSSL Project. Vulnerability Details CVE-ID:CVE-2013-4353 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference when handling malicious S/MIME messages. By sendin...

Security Bulletin: Tivoli Storage Productivity Center is affected by the following Net-SNMP vulnerabilities: CVE-2014-2284, CVE-2014-2285

Summary Security vulnerabilities have been discovered in Net-SNMP. Vulnerability Details CVE-ID:CVE-2014-2284 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by an error related to ICMP-MIB table objects. A remote attacker could exploit this vulnerability to cause a denial of...

PT-2022-4345 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge 2020 SP2 Patch 04201.2111.1802.0000 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

DEBIAN-CVE-2020-27788

An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service...

UBUNTU-CVE-2020-27790

A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability...

iLO Amplifier Pack Buffer Overflow

The vulnerability of the iLO Amplifier Pack software for automatic restoration of factory settings involves reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...