EUVD-2021-0773

Malware in sbrugna...

EUVD-2022-7290

Malicious code in bioql PyPI...

CVE-2022-3952

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

CVE-2021-29451

Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release...

com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), com.manydesigns:demo-tt (>=5.2.0, <=5.2.1) +82 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (11.0.2)

org.keycloak:keycloak-core MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =5.2.0, =5.2.0, =1.1.0, =0.1.0, =0.0.3, =0.49,...

com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), com.manydesigns:demo-tt (>=5.2.0, <=5.2.1) +82 more potentially affected by CVE-2022-0225 via org.keycloak:keycloak-core (11.0.2)

org.keycloak:keycloak-core MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =5.2.0, =5.2.0, =1.1.0, =0.1.0, =0.0.3, =0.49,...

GHSA-925R-R6RP-2JJ7 ManyDesigns Portofino subject to creation of insecure temporary file

A vulnerability has been found in ManyDesigns Portofino 5.3.2. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to version 5.3.3 is able to address...

ManyDesigns Portofino subject to creation of insecure temporary file

A vulnerability has been found in ManyDesigns Portofino 5.3.2. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to version 5.3.3 is able to address...

CVE-2022-3952

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

Directory traversal

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

CVE-2022-3952

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

CVE-2022-3952 ManyDesigns Portofino WarFileLauncher.java createTempDir temp file

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

CVE-2022-3952 ManyDesigns Portofino WarFileLauncher.java createTempDir temp file

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

ManyDesigns Portofino security vulnerabilities

ManyDesigns Portofino is a low-code tool from ManyDesigns Italy. It is used to build model-driven REST APIs and web applications. A security vulnerability exists in ManyDesigns Portofino 5.3.2, which originates in an unknown section of the WarFileLauncher.java file, and can be exploited by an...

CVE-2022-3952: Insecure Temporary File

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

PT-2022-24976 · Manydesigns · Manydesigns Portofino

Name of the Vulnerable Software and Affected Versions: ManyDesigns Portofino version 5.3.2 Description: A vulnerability has been found in ManyDesigns Portofino, where the function createTempDir of the file WarFileLauncher.java is affected. The manipulation leads to the creation of a temporary fil...

CVE-2022-3952 ManyDesigns Portofino WarFileLauncher.java createTempDir temp file

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to...

CVE-2022-3952

Summary: CVE-2022-3952 affects ManyDesigns Portofino 5.3.2. The vulnerability is in WarFileLauncher.java:createTempDir, which allows creation of a temporary file in a directory with insecure permissions. This could lead to disclosure of sensitive data. A fix is available in Portofino 5.3.3; patch...

com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), com.manydesigns:demo-tt (>=5.2.0, <=5.2.1) +82 more potentially affected by CVE-2022-0225 via org.keycloak:keycloak-core (11.0.2)

org.keycloak:keycloak-core MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =5.2.0, =5.2.0, =1.1.0, =0.1.0, =0.0.3, =0.49,...

com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), com.manydesigns:demo-tt (>=5.2.0, <=5.2.1) +82 more potentially affected by CVE-2020-27838 via org.keycloak:keycloak-core (11.0.2)

org.keycloak:keycloak-core MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =5.2.0, =5.2.0, =1.1.0, =0.1.0, =0.0.3, =0.49,...