7816 matches found
com.hazelcast:hazelcast-build-utils (4.2-beta-1), com.hazelcast:hazelcast-spring (4.2-beta-1) +2 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.2-beta-1)
com.hazelcast:hazelcast MAVEN version 4.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2-beta-1 - com.hazelcast:hazelcast-spring 4.2-beta-1 -...
com.hazelcast.jet:hazelcast-jet-core (4.5.2), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.2) +5 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.2.3)
com.hazelcast:hazelcast MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.2 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.2 -...
com.hazelcast.jet:hazelcast-jet-core (4.5.4), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.4) +24 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.2.6)
com.hazelcast:hazelcast MAVEN version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.4 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.4 -...
com.hazelcast:hazelcast-build-utils (4.2.7), com.hazelcast:hazelcast-distribution (4.2.7) +12 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.2.7)
com.hazelcast:hazelcast MAVEN version 4.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2.7 - com.hazelcast:hazelcast-distribution 4.2.7 -...
com.hazelcast:hazelcast-build-utils (3.11.7), com.hazelcast:hazelcast-client (3.11.7) +1 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.11.7)
com.hazelcast:hazelcast MAVEN version 3.11.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.11.7 - com.hazelcast:hazelcast-client 3.11.7 -...
com.hazelcast:hazelcast-build-utils (3.11.6), com.hazelcast:hazelcast-client (3.11.6) +1 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.11.6)
com.hazelcast:hazelcast MAVEN version 3.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.11.6 - com.hazelcast:hazelcast-client 3.11.6 -...
com.hazelcast:hazelcast-aws (2.4), com.hazelcast:hazelcast-build-utils (3.12-beta-1) +3 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.12-beta-1)
com.hazelcast:hazelcast MAVEN version 3.12-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-aws 2.4 - com.hazelcast:hazelcast-build-utils 3.12-beta-1 -...
com.hazelcast:hazelcast-build-utils (3.12-beta-2), com.hazelcast:hazelcast-client (3.12-beta-2) +1 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.12-beta-2)
com.hazelcast:hazelcast MAVEN version 3.12-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.12-beta-2 - com.hazelcast:hazelcast-client 3.12-beta-2 -...
com.hazelcast:hazelcast-build-utils (3.10.7), com.hazelcast:hazelcast-client (3.10.7) +1 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.10.7)
com.hazelcast:hazelcast MAVEN version 3.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.10.7 - com.hazelcast:hazelcast-client 3.10.7 -...
CVE-2024-0023
In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : shadow vulnerability (USN-6640-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6640-1 advisory. It was discovered that shadow was not properly sanitizing memory when running the password utility. An...
co.paralleluniverse:comsat-test-utils (0.2.0), io.undertow:undertow-servlet (1.1.0.beta5) +2 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.1.0.beta5)
io.undertow:undertow-core MAVEN version 1.1.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-test-utils 0.2.0 - io.undertow:undertow-servlet 1.1.0.beta5 -...
com.opensearchserver:oss-java-client (1.0.0), com.opensearchserver:oss-utils (1.0.0) +63 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.1.2.final)
io.undertow:undertow-core MAVEN version 1.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-java-client 1.0.0 - com.opensearchserver:oss-utils 1.0.0 -...
co.paralleluniverse:comsat-test-utils (0.4.0), com.gitblit.fathom:fathom-core (>=0.5.2, <=0.6.0) +92 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.2.8.final)
io.undertow:undertow-core MAVEN version 1.2.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-test-utils 0.4.0 - com.gitblit.fathom:fathom-core =0.5.2, =0.5.2, =0.5.2,...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
Malware in iris-front-test-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...