org.sonarsource.sonarqube:sonar-ce (5.6-rc1), org.sonarsource.sonarqube:sonar-core (5.6-rc1) +6 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (5.6-rc1)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 5.6-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-ce 5.6-rc1 -...

com.qualinsight.plugins.sonarqube:qualinsight-plugins-sonarqube-badges (>=2.0.0-rc1, <=2.0.1), com.qualinsight.plugins.sonarqube:qualinsight-plugins-sonarqube-licensing (1.0.0) +9 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (5.5)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - com.qualinsight.plugins.sonarqube:qualinsight-plugins-sonarqube-badges...

org.sonarsource.sonarqube:sonar-ce (6.3.1), org.sonarsource.sonarqube:sonar-core (6.3.1) +7 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.3.1)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-ce 6.3.1 -...

org.sonarsource.sonarqube:sonar-batch (5.4-rc2), org.sonarsource.sonarqube:sonar-batch-protocol (5.4-rc2) +6 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (5.4-rc2)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 5.4-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-batch 5.4-rc2 -...

org.sonarsource.sonarqube:sonar-application (6.7.3), org.sonarsource.sonarqube:sonar-ce (6.7.3) +10 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.7.3)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.7.3 -...

org.sonarsource.sonarqube:sonar-xoo-plugin (5.3-rc1) potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (5.3-rc1)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 5.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-xoo-plugin 5.3-rc1 Source cves:...

Apache ShenYu Authorization Bypass

The vulnerability of the Apache ShenYu software lies in the lack of authorization for critical functions. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions and gain access to the /plugin API without being authorized...

GHSA-6V39-P2XQ-G5C3 Missing authentication in ShenYu

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1...

Insecure Access Control

shenyu has insecure access control. The vulnerability exists due to a lack of validation of the user access via the /plugin api allowing an attacker to access the system without authentication...

CVE-2022-23944

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1...

Authentication flaw

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1...

CVE-2022-23944

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1...

PT-2022-1759

Name of the Vulnerable Software and Affected Versions Apache ShenYu versions 2.4.0 through 2.4.1 Description The issue is related to the lack of authentication for a critical function, allowing a remote attacker to bypass security restrictions and access the "/plugin API" endpoint without...

CVE-2022-23944: Missing Authorization

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1...

[SECURITY] Fedora 33 Update: nbdkit-1.24.6-1.fc33

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

[SECURITY] Fedora 34 Update: nbdkit-1.26.5-1.fc34

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

[SECURITY] Fedora 33 Update: tcmu-runner-1.5.2-7.fc33

A daemon that handles the complexity of the LIO kernel target's userspace passthrough interface TCMU. It presents a C plugin API for extension modu les that handle SCSI requests in ways not possible or suitable to be handled by LIO's in-kernel backstores...

DEBIAN-CVE-2020-16014

Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

UBUNTU-CVE-2020-16014

Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome PPAPI Code Execution

The vulnerability of the PPAPI implementation in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...