com.hazelcast:hazelcast-build-utils (3.5-ea), com.hazelcast:hazelcast-client (3.5-ea) +8 more potentially affected by CVE-2023-33265 via com.hazelcast:hazelcast (3.5-ea)

com.hazelcast:hazelcast MAVEN version 3.5-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.5-ea - com.hazelcast:hazelcast-client 3.5-ea -...

com.hazelcast:hazelcast-build-utils (3.12-beta-2), com.hazelcast:hazelcast-client (3.12-beta-2) +1 more potentially affected by CVE-2023-33265 via com.hazelcast:hazelcast (3.12-beta-2)

com.hazelcast:hazelcast MAVEN version 3.12-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.12-beta-2 - com.hazelcast:hazelcast-client 3.12-beta-2 -...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-3765 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-3765 Source advisory: OSV:GHSA-FMXJ-6H9G-6VW3...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-3765 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-3765 Source advisory: OSV:PYSEC-2023-308...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-35908 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-35908 Source advisory:...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2022-46651 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2022-46651 Source advisory:...

Malicious code in @cima/prism-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f49996021053433e43b19a3a4ae21a731784fc9b4d053c1ee07dea4613dd76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-35 Malicious code in @cima/prism-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f49996021053433e43b19a3a4ae21a731784fc9b4d053c1ee07dea4613dd76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Android OS buffer error vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android OS, which stems from a lack of bounds checking and possible out-of-bounds writes in gattendoperation in gattutils.cc...

document-sorter (0.1.0), zonesmart-utils (>=0.4.0, <=0.4.1) potentially affected by CVE-2023-36807 via pypdf2 (2.10.5)

pypdf2 PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf2 and may be impacted: - document-sorter 0.1.0 - zonesmart-utils =0.4.0, =0.4.1 Source cves: CVE-2023-36807 Source advisory: OSV:GHSA-HM9V-VJ3R-R55M...

document-sorter (0.1.0), zonesmart-utils (>=0.4.0, <=0.4.1) potentially affected by CVE-2023-36807 via pypdf2 (2.10.5)

pypdf2 PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf2 and may be impacted: - document-sorter 0.1.0 - zonesmart-utils =0.4.0, =0.4.1 Source cves: CVE-2023-36807 Source advisory: GHSA-HM9V-VJ3R-R55M...

document-sorter (0.1.0), zonesmart-utils (>=0.4.0, <=0.4.1) potentially affected by CVE-2023-36807 via pypdf2 (2.10.5)

pypdf2 PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf2 and may be impacted: - document-sorter 0.1.0 - zonesmart-utils =0.4.0, =0.4.1 Source cves: CVE-2023-36807 Source advisory: MEND:CVE-2023-36807...

CVE-2023-21194

In gattdbgopname of gattutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21194

In gattdbgopname of gattutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Amazon Linux 2023 : libeconf, libeconf-devel, libeconf-utils (ALAS2023-2023-227)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-227 advisory. A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files.This issue affects libeconf: before 0.5.2...

abi-ds-utils (1.0.1), acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.11.0) +135 more potentially affected by CVE-2023-34110 via flask-appbuilder (>=1.10.0, <=4.3.1)

flask-appbuilder PYPI version =1.10.0, =0.8.44.4rc1, =0.1.0rc3, =2022.9.19, =0.2.9b1, =1.0.7, =0.5.1, =0.2.0, =0.1.0, =1.0.0, =0.0.7, =0.0.1, =0.0.3, =0.0.6, =0.0.8 and more Source cves: CVE-2023-34110 Source advisory: MEND:CVE-2023-34110...

abi-ds-utils (1.0.1), acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0) +14 more potentially affected by CVE-2023-34110 via flask-appbuilder (>=4.1.2, <=4.3.1)

flask-appbuilder PYPI version =4.1.2, =0.10.5.2rc3, =0.8.2, =2.3.3rc1, =0.1.0, =0.1.20, =2.3.0.dev0, =0.0.37, =0.1.2, =2.4.3, =0.2.0, =0.2.1 and more Source cves: CVE-2023-34110 Source advisory: GHSA-JHPR-J7CQ-3JP3...

MAL-2023-1235 Malicious code in mfe-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities

Summary IBM has addressed multiple vulnerabilities in IBM Spectrum Discover. Webpack loader-utils CVE-2022-37601 is vulnerable to execute arbitrary code on the system caused by a pollution flaw in parseQuery function. OpenStack Keystone CVE-2021-3563 is vulnerable to bypass security restriction...

Out-of-bounds Write

erofs-utils is vulnerable to Out-of-bounds Write. The vulnerability is in the 'erofsfsckdirentiter' function within 'fsck/main.c' which allows a malicious attacker to execute arbitrary code with a crafted erofs filesystem image leading to a heap-based buffer overflow...