hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-6909 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-6909 Source advisory: OSV:GHSA-5R3Q-93Q3-F978...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-6940 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-6940 Source advisory: OSV:GHSA-HVC6-42VF-JHF8...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-6909 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-6909 Source advisory: OSV:PYSEC-2023-252...

Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities

Summary IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-4527 DESCRIPTION: glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the getaddrinfo function. By...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from shadow-utils, procps-ng, containerd, urllib3, nghttp2 and Golang

Summary Multiple issues were identified in Red Hat UBI packages, go-toolset and OSE are fixed and shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. Vulnerability Details CVEID:CVE-2023-25153 DESCRIPTION: containerd is vulnerable to a denial of service, caused by a memory...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-6831 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-6831 Source advisory: OSV:GHSA-554W-XH4J-8W64...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-6831 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-6831 Source advisory: OSV:PYSEC-2023-253...

Amazon Linux 2023 : shadow-utils, shadow-utils-subid, shadow-utils-subid-devel (ALAS2023-2023-450)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-450 advisory. A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to sto...

dev.bomu:motan (0.1), io.jboot:jboot (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.5)

com.jfinal:jfinal MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - dev.bomu:motan 0.1 - io.jboot:jboot =2.2.0, =3.5.2.v20190910-release, =3.5.5.v20191010-release Source cves: CVE-2023-50137 Sour...

com.lambkit:lambkit (>=1.0.2, <=1.0.3), io.jboot:jboot (>=2.2.5, <=2.3.0) +1 more potentially affected by CVE-2023-50101 via com.jfinal:jfinal (4.7)

com.jfinal:jfinal MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.lambkit:lambkit =1.0.2, =2.2.5, =3.5.6.v20191101-release, =3.5.7.v20191115-release Source cves: CVE-2023-50101 Source...

cn.dev33:sa-token-jboot-plugin (>=1.30.0.rc, <=1.31.2.temp), com.jfinal:jfinal-undertow (2.9) +2 more potentially affected by CVE-2023-50100 via com.jfinal:jfinal (4.9.22)

com.jfinal:jfinal MAVEN version 4.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.30.0.rc, =1.0.1, =3.14.4, =3.14.6 Source cves: CVE-2023-50100 Source advisory:...

com.lambkit:lambkit (>=1.0.2, <=1.0.3), io.jboot:jboot (>=2.2.5, <=2.3.0) +1 more potentially affected by CVE-2023-50100 via com.jfinal:jfinal (4.7)

com.jfinal:jfinal MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.lambkit:lambkit =1.0.2, =2.2.5, =3.5.6.v20191101-release, =3.5.7.v20191115-release Source cves: CVE-2023-50100 Source...

dev.bomu:motan (0.1), io.jboot:jboot (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2023-50100 via com.jfinal:jfinal (4.5)

com.jfinal:jfinal MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - dev.bomu:motan 0.1 - io.jboot:jboot =2.2.0, =3.5.2.v20190910-release, =3.5.5.v20191010-release Source cves: CVE-2023-50100 Sour...

com.github.fangjinuo.sqlhelper.examples:sqlhelper-examples-jfinal (3.0.5), com.github.fangjinuo.sqlhelper:sqlhelper-jfinal (>=3.1.1, <=3.6.10) +8 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.9)

com.jfinal:jfinal MAVEN version 4.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.fangjinuo.sqlhelper.examples:sqlhelper-examples-jfinal 3.0.5 - com.github.fangjinuo.sqlhelper:sqlhelper-jfinal =3.1....

Info Disclosure org.codehaus.plexus:plexus-utils Dependency in Bamboo Data Center and Server

This High severity org.codehaus.plexus:plexus-utils Dependency vulnerability was introduced in versions 9.2.1 of Bamboo Data Center and Server. This org.codehaus.plexus:plexus-utils Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:...

Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2023-3367)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-6753 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-6753 Source advisory: OSV:GHSA-V945-R3RC-6FJM...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-6753 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-6753 Source advisory: OSV:PYSEC-2023-309...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-6709 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-6709 Source advisory: OSV:GHSA-CXFR-5Q3R-2RC2...

Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2023-3350)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...