EulerOS 2.0 SP3 : apr-util (EulerOS-SA-2022-1704)

According to the versions of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions,...

Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2022-1704)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ch.inftec.ju:ju-testing-ee (>=4.4-4, <=4.5.1-11), ch.inftec.ju:ju-util-ee (>=4.4-4, <=4.5.1-11) +6 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.5.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-testing-ee =4.4-4, =4.4-4, =0.2.4, =0.2.9, =0.3.0 Source cves: CVE-2021-20250 Source...

ch.inftec.ju:ju-util-ee (>=4.1, <=4.2), com.github.marschall:osgi-remoting-ejb-jboss (0.2.0) +7 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.16.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-util-ee =4.1, =3.0.39, =3.0.39, =3.0.53, =3.0.53, =7.1.83 Source cves: CVE-2021-2025...

com.github.piltt:silky-persistence_2.10 (>=1.0.3, <=1.0.57), com.github.piltt:silky-persistence_2.11 (>=1.0.3, <=1.0.57) +3 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (1.7.6)

org.elasticsearch:elasticsearch MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.piltt:silky-persistence2.10 =1.0.3, =1.0.3, =12.0, =12.0, =12.0, =21.5 Source cves:...

Improper `Sync` implementation on `FuturesUnordered` in futures-utils can cause data corruption

An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled...

com.github.piltt:silky-persistence_2.10 (>=1.0.3, <=1.0.57), com.github.piltt:silky-persistence_2.11 (>=1.0.3, <=1.0.57) +3 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.7.6)

org.elasticsearch:elasticsearch MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.piltt:silky-persistence2.10 =1.0.3, =1.0.3, =12.0, =12.0, =12.0, =21.5 Source cves:...

ch.inftec.ju:ju-util-ee (>=4.1, <=4.2), com.github.marschall:osgi-remoting-ejb-jboss (0.2.0) +7 more potentially affected by CVE-2020-14297 via org.jboss:jboss-ejb-client (1.0.16.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-util-ee =4.1, =3.0.39, =3.0.39, =3.0.53, =3.0.53, =7.1.83 Source cves: CVE-2020-1429...

new packages: util-linux

An update is available for util-linux. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

new packages: xcb-util-renderutil

An update is available for xcb-util-renderutil. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

new packages: xcb-util-image

An update is available for xcb-util-image. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: xcb-util

An update is available for xcb-util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

new packages: perl-Params-Util

An update is available for perl-Params-Util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: apr-util

An update is available for apr-util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

GHSA-2JJM-6WHX-P8W4 filp whoops Cross-site Scripting vulnerability

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has a Cross-site Scripting vulnerability...

Cross-site Scripting in Graylog Server

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js...

com.flowcentraltech.flowcentral:flowcentral-tomcat (1.0.64), com.github.dblock.waffle:waffle-tomcat9 (1.8.1) +11 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=9.0.0.m1, <=9.0.0.m13)

org.apache.tomcat:tomcat-util MAVEN version =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m13 Source cves: CVE-2016-8745 Source advisory: OSV:GHSA-W3J5-Q8F2-3CQQ...

com.att.nsa:msgrtr (0.0.5), com.att.nsa:nsaserverlibrary (1.0.10) +131 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=8.0.0-rc1, <=8.0.39)

org.apache.tomcat:tomcat-util MAVEN version =8.0.0-rc1, =2.2.0, =0.9.1-beta3, =0.9.1-beta4, =0.9.1-beta3, =0.1.3, =0.1.5, =0.1.6 and more Source cves: CVE-2016-8745 Source advisory: OSV:GHSA-W3J5-Q8F2-3CQQ...

com.flowcentraltech.flowcentral:flowcentral-tomcat (1.0.64), com.github.dblock.waffle:waffle-tomcat9 (1.8.1) +11 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=9.0.0.m1, <=9.0.0.m13)

org.apache.tomcat:tomcat-util MAVEN version =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m13 Source cves: CVE-2016-8745 Source advisory: GHSA-W3J5-Q8F2-3CQQ...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.com.caelum.vraptor:vraptor-test (>=2.0.0, <=4.0.0) +277 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=7.0.0, <=7.0.73)

org.apache.tomcat:tomcat-util MAVEN version =7.0.0, =0.1.6, =2.0.0, =2.0.0, =1.2.4, =1.0-release, =1.0-release, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.2.7 and more Source cves: CVE-2016-8745 Source advisory: GHSA-W3J5-Q8F2-3CQQ...