CVE-2022-47966

CVE-2022-47966 POC для CVE-2022-47966, затрагивающий следующие продукты ManageEngine: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint...

CVE-2022-47966-Scan

CVE-2022-47966 Сканер О программе CVE-2022-47966 — это критическая уязвимость удаленного выполнения кода без аутентификации, затрагивающая как минимум 24 локальных продукта ManageEngine. Уязвимость применима только в том случае, если включен SAML SSO. Для некоторых продуктов она также применима,...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2022_1491)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221491 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPat...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_1442)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221442 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPat...

CLSA-2024-1733184025 TuxCare security update for org.apache.santuario:xmlsec (3 CVEs)

TuxCare rebuilt org.apache.santuario:xmlsec to address 3 CVEs. Fixed in 2.0.10.tuxcare...

OESA-2025-2383 xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fixes: All versions of Apache Santuario - XML Security for Java...

EUVD-2012-4007

Malware in sbrugna...

EUVD-2013-2164

Malware in sbrugna...

EUVD-2019-0620

Malware in sbrugna...

EUVD-2013-2121

Malware in sbrugna...

EUVD-2013-2119

Malware in sbrugna...

EUVD-2013-2118

Malware in sbrugna...

EUVD-2021-2083

Malware in sbrugna...

EUVD-2022-5065

Malicious code in bioql PyPI...

EUVD-2023-2836

Malicious code in bioql PyPI...

EUVD-2022-5522

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-40690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the secureValidation property is not passed...

Linux Distros Unpatched Vulnerability : CVE-2023-44483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a privat...

Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities

Summary IBM Cognos Analytics is affected by vulnerabilities in IBM WebSphere Application Server Liberty and Open-Source Software OSS. Issues related to these components have been addressed by upgrading or removing the vulnerable libraries. Additionally, a cross-site scripting XSS vulnerability ha...

Linux Distros Unpatched Vulnerability : CVE-2019-12400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of...