org.infinispan.server:infinispan-server-feature-pack (9.2.1.final), org.infinispan.server:infinispan-server-infinispan (9.2.1.final) +3 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (9.2.1.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 9.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.2.1.final -...

org.infinispan.server:infinispan-server-feature-pack (8.2.0.beta1), org.infinispan.server:infinispan-server-infinispan (8.2.0.beta1) +3 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (8.2.0.beta1)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 8.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.2.0.beta1 -...

org.infinispan.server:infinispan-server-feature-pack (8.1.8.final), org.infinispan.server:infinispan-server-infinispan (8.1.8.final) +3 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (8.1.8.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 8.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.8.final -...

org.infinispan.server:infinispan-server-feature-pack (8.1.9.final), org.infinispan.server:infinispan-server-infinispan (8.1.9.final) +3 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (8.1.9.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 8.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.9.final -...

org.infinispan.server:infinispan-server-feature-pack (8.2.0.final), org.infinispan.server:infinispan-server-infinispan (8.2.0.final) +3 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (8.2.0.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 8.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.2.0.final -...

org.infinispan.server:infinispan-server-feature-pack (9.1.1.final), org.infinispan.server:infinispan-server-infinispan (9.1.1.final) +3 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (9.1.1.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 9.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.1.1.final -...

org.infinispan.server:infinispan-server-feature-pack (9.0.3.final), org.infinispan.server:infinispan-server-infinispan (9.0.3.final) +4 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (9.0.3.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 9.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.0.3.final -...

org.infinispan.server:infinispan-server-feature-pack (9.1.5.final), org.infinispan.server:infinispan-server-infinispan (9.1.5.final) +3 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (9.1.5.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 9.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.1.5.final -...

org.infinispan.server:infinispan-server-feature-pack (9.0.0.cr1), org.infinispan.server:infinispan-server-infinispan (9.0.0.cr1) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (9.0.0.cr1)

org.infinispan:infinispan-client-hotrod MAVEN version 9.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.0.0.cr1 -...

CVE-2023-50854

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly Squirrly SEO - Advanced Pack.This issue affects Squirrly SEO - Advanced Pack: from n/a before 2.4.02...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly Squirrly SEO - Advanced Pack.This issue affects Squirrly SEO - Advanced Pack: from n/a through 2.3.8...

CVE-2023-50854

CVE-2023-50854 affects Squirrly SEO - Advanced Pack (plugin) with an SQL Injection in the product prior to version 2.4.02. Public advisories (Wordfence and RH CVE pages) indicate patch status as Unpatched; mitigation is to upgrade to 2.4.02 or newer when available. Details across connected docs c...

msgpacker security vulnerability

msgpacker is a fast MessagePack NodeJS/JavaScript implementation. A security vulnerability exists in versions of msgpacker prior to 1.10.1, which stems from the fact that when decoding a user-supplied MessagePack message, an attacker can craft the message in such a way that the decoder triggers...

CVE-2023-50854: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly Squirrly SEO - Advanced Pack.This issue affects Squirrly SEO - Advanced Pack: from n/a before 2.4.02...

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability [CVE-2023-46604]

Summary IBM Security SOAR uses an older version of Apache ActiveMQ that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended customers upgrade to the latest applicable fix pack. CVE-2023-46604 Vulnerability Details...

Security Bulletin: Modification of Assumed-Immutable Data (MAID) affects IBM Financial Transaction Manager for SWIFT Services (CVE-2023-49880)

Summary Modification of Assumed-Immutable Data MAID affects the MER facility of IBM Financial Transaction Manager for SWIFT Services. This vulnerability is addressed. Vulnerability Details CVEID:CVE-2023-49880 DESCRIPTION: In the Message Entry and Repair MER facility of Financial Transaction...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-dependencies-server-min (10.0.0) +5 more potentially affected by CVE-2023-6291 via org.keycloak:keycloak-services (10.0.0)

org.keycloak:keycloak-services MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 - org.keycloak:keycloak-dependencies-server-m...

WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection

Software Squirrly SEO - Advanced Pack Type Plugin Vulnerable versions = 2.3.8 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50854 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID d251faf0f6ee Credits Muhammad Daffa Required privilege...

Security Bulletin: IBM® Db2® federated server is vulnerable to a denial of service when a specially crafted cursor is used. (CVE-2023-46167)

Summary IBM® Db2® federated server is vulnerable to a denial of service when a specially crafted cursor is used. Vulnerability Details CVEID:CVE-2023-46167 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server federated server is vulnerable to a denial of service when a...

Security Bulletin: IBM® Db2® could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. (CVE-2023-47701)

Summary IBM® Db2® could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. Vulnerability Details CVEID:CVE-2023-47701 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user with...