com.github.widebase:widebase-stream-handler-cq_2.9.1 (>=0.1.0, <=0.2.2), com.github.widebase:widebase-stream-handler-cq_2.9.2 (>=0.2.3, <=0.3.3) +180 more potentially affected by CVE-2015-6524 via org.apache.activemq:activemq-jaas (>=5.0.0, <=5.10.1)

org.apache.activemq:activemq-jaas MAVEN version =5.0.0, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =2.0.0, =2.3.3, =2.5.1 and more Source cves: CVE-2015-6524 Source advisory: OSV:GHSA-23CR-5HR4-RGWV...

com.github.widebase:widebase-stream-handler-cq_2.9.1 (>=0.1.0, <=0.2.2), com.github.widebase:widebase-stream-handler-cq_2.9.2 (>=0.2.3, <=0.3.3) +180 more potentially affected by CVE-2015-6524 via org.apache.activemq:activemq-jaas (>=5.0.0, <=5.10.1)

org.apache.activemq:activemq-jaas MAVEN version =5.0.0, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =2.0.0, =2.3.3, =2.5.1 and more Source cves: CVE-2015-6524 Source advisory: GHSA-23CR-5HR4-RGWV...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.14), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.14) +36 more potentially affected by CVE-2017-12622 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.2.1)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =0.9.0, =0.10.1 and more Source cves:...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.14), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.14) +36 more potentially affected by CVE-2017-12622 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.2.1)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =0.9.0, =0.10.1 and more Source cves:...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.16), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.16) +37 more potentially affected by CVE-2017-15696 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.3.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.16.0, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =1.3.0 -...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.16), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.16) +37 more potentially affected by CVE-2017-15692 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.3.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.16.0, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =1.3.0 -...

Salt Improper Access Control

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...

GHSA-VQH4-CRJF-JJXX Salt Improper Access Control

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...

[SECURITY] Fedora 35 Update: libxml2-2.9.14-1.fc35

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

com.github.widebase:widebase-stream-handler-cq_2.9.1 (>=0.1.0, <=0.2.2), com.github.widebase:widebase-stream-handler-cq_2.9.2 (>=0.2.3, <=0.3.3) +180 more potentially affected by CVE-2014-3612 via org.apache.activemq:activemq-jaas (>=5.0.0, <=5.10.0)

org.apache.activemq:activemq-jaas MAVEN version =5.0.0, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =2.0.0, =2.3.3, =2.5.1 and more Source cves: CVE-2014-3612 Source advisory: GHSA-72M6-23FF-7Q26...

GHSA-8GWC-X7MG-7P7P Apache XML Security For Java vulnerable to Infinite Loop

Affected versions of xmlsec are subject to a denial of service vulnerability. Should a user check the signature of a message larger than 512 MB, the method expandSizeint newPos of class org.apache.xml.security.utils.UnsyncByteArrayOutputStream goes in an endless loop. A remote attacker could use...

Joomla! Object Injection Vulnerability

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for object injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...

GHSA-5M3W-RVVH-8FX6 Joomla! Object Injection Vulnerability

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for object injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...

cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2), com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.1.release) +53 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.24.release)

org.springframework:spring-messaging MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp 1.0.2 -...

kernel: sctp: Invalid chunks may be used to remotely remove existing associations

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses...

kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c

A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS...

PT-2024-9055

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is simil...

NewStart CGSL CORE 5.04 / MAIN 5.04 : xstream Vulnerability (NS-SA-2022-0007)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has xstream packages installed that are affected by a vulnerability: - XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has...

NewStart CGSL CORE 5.05 / MAIN 5.05 : xstream Multiple Vulnerabilities (NS-SA-2022-0033)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has xstream packages installed that are affected by multiple vulnerabilities: - XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a...

[SECURITY] Fedora 36 Update: golang-github-francoispqt-gojay-1.2.13-6.fc36

GoJay is a performant JSON encoder/decoder for Golang currently the most performant, see benchmarks. It has a simple API and doesn't use reflection. It relies on small interfaces to decode/encode structures and slices. Gojay also comes with powerful stream decoding features and an even faster...