org.wildfly.core:wildfly-core-dist (2.0.8.final), org.wildfly.core:wildfly-core-feature-pack (2.0.8.final) +28 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.0.8.final)

org.wildfly.core:wildfly-controller MAVEN version 2.0.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 2.0.8.final -...

org.wildfly.core:wildfly-core-feature-pack-common (18.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (18.0.0.beta3) +32 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (18.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version 18.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 18.0.0.beta3 -...

org.wildfly.core:wildfly-core-dist (4.0.0.alpha2), org.wildfly.core:wildfly-core-feature-pack (4.0.0.alpha2) +32 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (4.0.0.alpha2)

org.wildfly.core:wildfly-controller MAVEN version 4.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 4.0.0.alpha2 -...

org.wildfly.core:wildfly-core-feature-pack-common (20.0.0.beta4), org.wildfly.core:wildfly-core-galleon-pack (20.0.0.beta4) +32 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (20.0.0.beta4)

org.wildfly.core:wildfly-controller MAVEN version 20.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 20.0.0.beta4 -...

org.wildfly.core:wildfly-core-build (8.0.0.beta1), org.wildfly.core:wildfly-core-dist-legacy (8.0.0.beta1) +33 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (8.0.0.beta1)

org.wildfly.core:wildfly-controller MAVEN version 8.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-build 8.0.0.beta1 -...

org.wildfly.core:wildfly-cli (2.0.0.beta6), org.wildfly.core:wildfly-core-dist (2.0.0.beta6) +29 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.0.0.beta6)

org.wildfly.core:wildfly-controller MAVEN version 2.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta6 - org.wildfly.core:wildfly-core-dist...

org.wildfly.core:wildfly-core-feature-pack-common (>=22.0.0.beta1, <=22.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (>=22.0.0.beta1, <=22.0.0.beta3) +114 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (>=22.0.0.beta1, <=22.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1,...

org.wildfly.core:wildfly-core-feature-pack-common (18.1.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (18.1.0.beta1) +125 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (18.1.0.beta1)

org.wildfly.core:wildfly-controller MAVEN version 18.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 18.1.0.beta1 -...

org.wildfly.core:wildfly-core-feature-pack-common (20.0.0.beta2), org.wildfly.core:wildfly-core-galleon-pack (20.0.0.beta2) +33 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (20.0.0.beta2)

org.wildfly.core:wildfly-controller MAVEN version 20.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 20.0.0.beta2 -...

Security Bulletin: An unspecified IBM SDK, Java Technology Edition vulnerability affects InfoSphere Data Replication

Summary An unspecified IBM SDK, Java Technology Edition vulnerability is addressed. Vulnerability Details CVEID:CVE-2022-21626 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security component could allow an unauthenticated attacker to cause a denial of service resulting in a...

Security Bulletin: Multiple vulnerabilities in Golang Go package affects Data Replication on Cloud Pak for Data

Summary Multiple vulnerabilities in Golang Go package used in Data Replication on Cloud Pak for Data was addressed. Vulnerability Details CVEID:CVE-2022-27664 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw in net/http. By sending a specially-crafted request, a remot...

Security Bulletin: A vulnerability in libksba package affects Data Replication on Cloud Pak for Data

Summary A vulnerability in libksba package used in Data Replication on Cloud Pak for Data was addressed. Vulnerability Details CVEID: CVE-2022-47629 DESCRIPTION: Libksba could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in the CRL signature parse...

November 7, 2023, update for Outlook 2013 (KB5002514)

November 7, 2023, update for Outlook 2013 KB5002514 This article describes update 5002514 for Microsoft Outlook 2013 that was released on November 7, 2023. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2013. It doesn't...

CVE-2023-45163

The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on...

CVE-2023-45161

The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on...

Design/Logic Flaw

The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This...

Design/Logic Flaw

The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on...

Design/Logic Flaw

The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on...

CVE-2023-45163 1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution

The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on...

CVE-2023-45163 1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution

The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on...