3981 matches found
new packages: util-linux
An update is available for util-linux. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...
new packages: xcb-util-renderutil
An update is available for xcb-util-renderutil. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...
new packages: xcb-util-image
An update is available for xcb-util-image. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
new packages: xcb-util
An update is available for xcb-util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...
new packages: perl-Params-Util
An update is available for perl-Params-Util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
new packages: apr-util
An update is available for apr-util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...
GHSA-2JJM-6WHX-P8W4 filp whoops Cross-site Scripting vulnerability
The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has a Cross-site Scripting vulnerability...
Cross-site Scripting in Graylog Server
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js...
com.att.nsa:msgrtr (0.0.5), com.att.nsa:nsaserverlibrary (1.0.10) +131 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=8.0.0-rc1, <=8.0.39)
org.apache.tomcat:tomcat-util MAVEN version =8.0.0-rc1, =2.2.0, =0.9.1-beta3, =0.9.1-beta4, =0.9.1-beta3, =0.1.3, =0.1.5, =0.1.6 and more Source cves: CVE-2016-8745 Source advisory: OSV:GHSA-W3J5-Q8F2-3CQQ...
com.flowcentraltech.flowcentral:flowcentral-tomcat (1.0.64), com.github.dblock.waffle:waffle-tomcat9 (1.8.1) +11 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=9.0.0.m1, <=9.0.0.m13)
org.apache.tomcat:tomcat-util MAVEN version =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m13 Source cves: CVE-2016-8745 Source advisory: GHSA-W3J5-Q8F2-3CQQ...
ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.com.caelum.vraptor:vraptor-test (>=2.0.0, <=4.0.0) +277 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=7.0.0, <=7.0.73)
org.apache.tomcat:tomcat-util MAVEN version =7.0.0, =0.1.6, =2.0.0, =2.0.0, =1.2.4, =1.0-release, =1.0-release, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.2.7 and more Source cves: CVE-2016-8745 Source advisory: OSV:GHSA-W3J5-Q8F2-3CQQ...
cn.zidot:sprite-component-web (1.0.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +51 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=8.5.0, <=8.5.8)
org.apache.tomcat:tomcat-util MAVEN version =8.5.0, =1.0.0, =1.0.4, =8.5.5.0, =1.9.5, =2.0.0, =1.0.0-incubating, =8.5.0, =8.5.0, =8.5.0, =8.5.0, =8.5.8 and more Source cves: CVE-2016-8745 Source advisory: GHSA-W3J5-Q8F2-3CQQ...
cn.zidot:sprite-component-web (1.0.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +51 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=8.5.0, <=8.5.8)
org.apache.tomcat:tomcat-util MAVEN version =8.5.0, =1.0.0, =1.0.4, =8.5.5.0, =1.9.5, =2.0.0, =1.0.0-incubating, =8.5.0, =8.5.0, =8.5.0, =8.5.0, =8.5.8 and more Source cves: CVE-2016-8745 Source advisory: OSV:GHSA-W3J5-Q8F2-3CQQ...
com.att.nsa:msgrtr (0.0.5), com.att.nsa:nsaserverlibrary (1.0.10) +131 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=8.0.0-rc1, <=8.0.39)
org.apache.tomcat:tomcat-util MAVEN version =8.0.0-rc1, =2.2.0, =0.9.1-beta3, =0.9.1-beta4, =0.9.1-beta3, =0.1.3, =0.1.5, =0.1.6 and more Source cves: CVE-2016-8745 Source advisory: GHSA-W3J5-Q8F2-3CQQ...
com.flowcentraltech.flowcentral:flowcentral-tomcat (1.0.64), com.github.dblock.waffle:waffle-tomcat9 (1.8.1) +11 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=9.0.0.m1, <=9.0.0.m13)
org.apache.tomcat:tomcat-util MAVEN version =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m13 Source cves: CVE-2016-8745 Source advisory: OSV:GHSA-W3J5-Q8F2-3CQQ...
ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.com.caelum.vraptor:vraptor-test (>=2.0.0, <=4.0.0) +277 more potentially affected by CVE-2016-8745 via org.apache.tomcat:tomcat-util (>=7.0.0, <=7.0.73)
org.apache.tomcat:tomcat-util MAVEN version =7.0.0, =0.1.6, =2.0.0, =2.0.0, =1.2.4, =1.0-release, =1.0-release, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.2.7 and more Source cves: CVE-2016-8745 Source advisory: GHSA-W3J5-Q8F2-3CQQ...
biz.gabrys.maven:plugin-utils (>=1.0, <=1.4.1), net.sf.buildbox:buildbox-util (1.0.0) +5 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.0)
org.codehaus.plexus:plexus-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.maven:plugin-utils =1.0, =1.6.0, =1.6.0, =1.6.1, =1.8.4 -...
GHSA-5FH8-X9XC-HXMC irisnet-crypto RCE Vulnerability
In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage...
