org.infinispan:infinispan-distribution (13.0.16.final), org.infinispan:infinispan-server-integration (13.0.16.final) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (13.0.16.final)

org.infinispan:infinispan-cachestore-sql MAVEN version 13.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-sql and may be impacted: - org.infinispan:infinispan-distribution 13.0.16.final -...

org.infinispan:infinispan-docs (12.1.2.final), org.infinispan:infinispan-javadoc-all (12.1.2.final) +8 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (12.1.2.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 12.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan:infinispan-docs 12.1.2.final -...

io.quarkus:quarkus-test-infinispan-client (>=2.13.1.final, <=2.13.7.final), org.infinispan:infinispan-distribution (13.0.11.final) +12 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (13.0.11.final)

org.infinispan:infinispan-cachestore-remote MAVEN version 13.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-remote and may be impacted: - io.quarkus:quarkus-test-infinispan-client =2.13.1.final,...

org.infinispan:infinispan-docs (12.1.16.final), org.infinispan:infinispan-server-integration (12.1.16.final) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (12.1.16.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 12.1.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan:infinispan-docs 12.1.16.final -...

org.infinispan:infinispan-server-integration (13.0.0.cr2), org.infinispan:infinispan-server-integrationtests-commons (13.0.0.cr2) +5 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (13.0.0.cr2)

org.infinispan:infinispan-cachestore-sql MAVEN version 13.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-sql and may be impacted: - org.infinispan:infinispan-server-integration 13.0.0.cr2 -...

org.infinispan:infinispan-distribution (13.0.19.final), org.infinispan:infinispan-docs (13.0.19.final) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (13.0.19.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 13.0.19.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan:infinispan-distribution 13.0.19.final -...

org.infinispan:infinispan-distribution (13.0.12.final), org.infinispan:infinispan-server-integration (13.0.12.final) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (13.0.12.final)

org.infinispan:infinispan-cachestore-sql MAVEN version 13.0.12.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-sql and may be impacted: - org.infinispan:infinispan-distribution 13.0.12.final -...

org.infinispan:infinispan-distribution (13.0.20.final), org.infinispan:infinispan-server-integration (13.0.20.final) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (13.0.20.final)

org.infinispan:infinispan-cachestore-sql MAVEN version 13.0.20.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-sql and may be impacted: - org.infinispan:infinispan-distribution 13.0.20.final -...

org.infinispan:infinispan-distribution (13.0.15.final), org.infinispan:infinispan-server-integration (13.0.15.final) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (13.0.15.final)

org.infinispan:infinispan-cachestore-sql MAVEN version 13.0.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-sql and may be impacted: - org.infinispan:infinispan-distribution 13.0.15.final -...

@apollo/server-integration-testsuite (>=4.7.1, <=4.7.3), @athenajs/core (>=0.0.1, <=0.0.17) +4 more potentially affected by unknown CVE via @apollo/server (>=4.7.1, <=4.7.3)

@apollo/server NPM version =4.7.1, =4.7.1, =0.0.1, =0.5.0-rc.0, =0.0.1, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: GHSA-68JH-RF6X-836F...

KLA20235 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SQL Server...

CVE-2023-21568: Deserialization of Untrusted Data

Microsoft SQL Server Integration Service VS extension Remote Code Execution Vulnerability...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to an issue in OPM and Golang Go packages (CVE-2020-15257, CVE-2021-21334 and CVE-2021-41771)

Summary IBM MQ Operator catalog container image is vulnerable to an issue in OPM package from Red Hat openshift4/ose-operator-registry and IBM MQ Operator, IBM Supplied Queue Manager container images are vulnerable to an issue in the Golang Go packages. CVE-2020-15257, CVE-2021-21334 and...

io.gravitee.gateway.standalone:gravitee-gateway-standalone-container (>=0.2.0, <=0.7.0), io.gravitee.gateway.standalone:gravitee-gateway-standalone-distribution (>=0.2.0, <=0.7.0) +12 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.7.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

[SECURITY] Fedora 34 Update: clamav-0.103.6-1.fc34

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] Fedora 36 Update: clamav-0.103.6-1.fc36

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Cross site scripting

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to create BitBucket Server consumers...

CVE-2022-28134

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers...

CVE-2022-28134

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers...

CVE-2022-28134

The data shows CVE-2022-28134 affects Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier, where multiple HTTP endpoints do not perform permission checks, allowing attackers with Overall/Read to create, view, and delete Bitbucket Server consumers. The issue is confirmed by multiple sour...