be.dabla:grizzly-spring-boot-jasper (>=2.0, <=2.7), codes.vps:tomcat-valve-request-filter (0.1) +246 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=9.0.0.m1, <=9.0.80)

org.apache.tomcat:tomcat-util MAVEN version =9.0.0.m1, =2.0, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.0.0, =5.9.6, =1.10, =1.10, =2.6.0, =2.8.0 - com.codedx:webapp-runner 9.0.65.0 - com.codedx:webapp-runner-main 9.0.65.0 - com.codedx:webapp-runner-memcached 9.0.65.0 -...

cn.zidot:sprite-component-web (1.0.0), com.51degrees:geo-location.web.examples.mvc (>=4.3.10, <=4.4.19) +192 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=8.5.0, <=8.5.93)

org.apache.tomcat:tomcat-util MAVEN version =8.5.0, =4.3.10, =4.3.10, =4.3.10, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =2.5, =1.4, =5.0.3.8.3, =2.3.0, =1.0.0, =1.1.5 and more Source cves: CVE-2023-42795 Source advisory: GHSA-G8PJ-R55Q-5C2V...

cn.zidot:sprite-component-web (1.0.0), com.51degrees:geo-location.web.examples.mvc (>=4.3.10, <=4.4.19) +192 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=8.5.0, <=8.5.93)

org.apache.tomcat:tomcat-util MAVEN version =8.5.0, =4.3.10, =4.3.10, =4.3.10, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =2.5, =1.4, =5.0.3.8.3, =2.3.0, =1.0.0, =1.1.5 and more Source cves: CVE-2023-42795 Source advisory: OSV:GHSA-G8PJ-R55Q-5C2V...

org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.0-m11), org.apache.tomcat:tomcat-catalina-ant (>=11.0.0-m1, <=11.0.0-m11) +6 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=11.0.0-m1, <=11.0.0-m11)

org.apache.tomcat:tomcat-util MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m11 Source cves: CVE-2023-42795 Source advisory: OSV:GHSA-G8PJ-R55Q-5C2V...

be.dabla:grizzly-spring-boot-jasper (>=2.0, <=2.7), codes.vps:tomcat-valve-request-filter (0.1) +246 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=9.0.0.m1, <=9.0.80)

org.apache.tomcat:tomcat-util MAVEN version =9.0.0.m1, =2.0, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.0.0, =5.9.6, =1.10, =1.10, =2.6.0, =2.8.0 - com.codedx:webapp-runner 9.0.65.0 - com.codedx:webapp-runner-main 9.0.65.0 - com.codedx:webapp-runner-memcached 9.0.65.0 -...

org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.0-m11), org.apache.tomcat:tomcat-catalina-ant (>=11.0.0-m1, <=11.0.0-m11) +6 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=11.0.0-m1, <=11.0.0-m11)

org.apache.tomcat:tomcat-util MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m11 Source cves: CVE-2023-42795 Source advisory: MEND:CVE-2023-42795...

be.dabla:grizzly-spring-boot-jasper (>=2.0, <=2.7), codes.vps:tomcat-valve-request-filter (0.1) +246 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=9.0.0.m1, <=9.0.80)

org.apache.tomcat:tomcat-util MAVEN version =9.0.0.m1, =2.0, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.0.0, =5.9.6, =1.10, =1.10, =2.6.0, =2.8.0 - com.codedx:webapp-runner 9.0.65.0 - com.codedx:webapp-runner-main 9.0.65.0 - com.codedx:webapp-runner-memcached 9.0.65.0 -...

cn.zidot:sprite-component-web (1.0.0), com.51degrees:geo-location.web.examples.mvc (>=4.3.10, <=4.4.19) +192 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=8.5.0, <=8.5.93)

org.apache.tomcat:tomcat-util MAVEN version =8.5.0, =4.3.10, =4.3.10, =4.3.10, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =2.5, =1.4, =5.0.3.8.3, =2.3.0, =1.0.0, =1.1.5 and more Source cves: CVE-2023-42795 Source advisory: MEND:CVE-2023-42795...

codes.vps:tomcat-valve-request-filter (1.0), com.atomgraph:linkeddatahub (>=4.0.0, <=5.4.0) +53 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=10.1.0-m1, <=10.1.13)

org.apache.tomcat:tomcat-util MAVEN version =10.1.0-m1, =4.0.0, =0.2.0, =1.0.0, =1.0.0, =0.0.1, =2.3.0, =4.1.0, =1.0.2, =1.0.2, =1.0.0, =1.0.0, =1.0.9 and more Source cves: CVE-2023-42795 Source advisory: MEND:CVE-2023-42795...

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Critical Photon OS Security Update - PHSA-2023-5.0-0110

Updates of 'apr-util', 'glibc' packages of Photon OS have been released...

CVE-2020-21583

A vulnerability was found in hwclock in util-linux, which allowed non-root users to access the hardware clock. This flaw allows an attacker to execute arbitrary code via the path parameter when setting the date...

Malicious code in xweb_3.0_util_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9395190d3b87df26bea461b71b3c6883af0dc1f6152bf4415a68881b850b780e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-28307 · Hutool · Hutool

Name of the Vulnerable Software and Affected Versions: hutool version 5.8.21 Description: The issue is related to a buffer overflow in the JSONUtil.parse component. Recommendations: For hutool version 5.8.21, consider disabling the JSONUtil.parse function until a patch is available. Restrict the...

Oracle Linux 7 : nss, / nss-softokn, / nss-util, / and / nspr (ELSA-2019-2237)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2237 advisory. nspr 4.21.0-1 - Rebase to NSPR 4.21 nss 3.44.0-4 - Fix certutil man page - Fix extracting a public key from a private key for dh, ec, and dsa 3.44.0-3 ...

Oracle Linux 6 : util-linux-ng (ELSA-2011-1691)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1691 advisory. - fix CVE-2011-1675 - mount fails to anticipate RLIMITFSIZE - fix CVE-2011-1677 - umount may fail to remove /etc/mtab lock file Tenable has extracted t...

PT-2023-26973 · Tracker Software Products · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

Malware in srm-front-util

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in srm-front-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c469dee4624e4b88565a73ec5ed2d02e175984dc96436647b3b2e5145daffd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1463 Malicious code in srm-front-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c469dee4624e4b88565a73ec5ed2d02e175984dc96436647b3b2e5145daffd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...