@khoazero123/hummus-recipe (=2.0.1), @mauriciocc/hummus-recipe (=2.0.1-node-16) +5 more potentially affected by CVE-2022-25892 via muhammara (>=1.10.0 <=2.0.0)

muhammara NPM version =1.10.0, =2.0.0, =1.10.25, =1.0.0, =1.0.4 Source cves: CVE-2022-25892 Source advisory: OSV:GHSA-9CV5-4WQV-9W94...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4899 more potentially affected by CVE-2022-35981 via tensorflow (>=1.0.1 <=2.7.1)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.5.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-35981 Source advisory: OSV:GHSA-VXV8-R8Q2-63XW...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4899 more potentially affected by CVE-2022-36012 via tensorflow (>=1.0.1 <=2.7.1)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.5.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-36012 Source advisory: OSV:GHSA-JVHC-5HHR-W3V5...

Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients

Some components in Apache Kafka use Arrays.equals to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been...

Okta Active Directory Agent 代码问题漏洞

Okta Active Directory Agent is a lightweight agent from Okta USA that can be installed on any Windows Server. It is used to connect to the local Active Directory for user configuration, de-configuration and authentication requests. A code issue vulnerability exists in Okta Active Directory Agent...

@actyx-contrib/actyx-tutorial-simulator (=0.1.0), @adaptier/opcua-browser (>=1.0.0 <=1.0.1) +112 more potentially affected by CVE-2022-25231 via node-opcua (>=0.0.49 <=2.73.1)

node-opcua NPM version =0.0.49, =1.0.0, =1.0.0, =0.1.6, =1.0.2, =1.1.19, =1.3.2-alpha.36, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.65 and more Source cves: CVE-2022-25231 Source advisory: OSV:GHSA-QPGC-XH7J-52Q8...

CVE-2022-35148

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

LemoGUI (=0.0.1-nightly), a2d (>=0.1.0 <=0.1.11) +277 more potentially affected by CVE-2021-45688 via ash (>=0.24.4 <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.1.0, =0.5.4, =0.2.0, =0.1.0, =0.3.0 - amethyst-navigation =0.1.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:GHSA-QJ69-C89V-JWQ2...

3deecelltracker (>=0.5.0a0 <=1.0.0), abracadabra (>=0.0.0 <=0.0.7) +101 more potentially affected by CVE-2022-29238 via notebook (>=4.2.3 <=6.4.11)

notebook PYPI version =4.2.3, =0.5.0a0, =0.0.0, =1.0.0, =1.0.0, =0.1.1, =1.0.1, =0.0.48, =1.0.0, =0.3.4, =0.1.0rc1, =0.0.1, =0.2.1 - combnetdep =1.0.0 and more Source cves: CVE-2022-29238 Source advisory: OSV:GHSA-V7VQ-3X77-87VG...

deno_cli (>=0.18.0-preview4 <=0.23.0), deno_cli_snapshots (>=0.0.3 <=0.19.0) +2 more potentially affected by CVE-2021-41641 via deno (>=0.15.0 <=0.6.0)

deno CARGO version =0.15.0, =0.18.0-preview4, =0.0.3, =0.0.1, =0.23.0 Source cves: CVE-2021-41641 Source advisory: OSV:GHSA-67HM-27MX-9CG7...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4878 more potentially affected by CVE-2022-29205 via tensorflow (>=1.0.1 <=2.6.3)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-29205 Source advisory: OSV:GHSA-54CH-GJQ5-4976...

RPD:bmc-rpd (=1.1), com.piketec.jenkins.plugins:piketec-tpt (=6.3) +19 more potentially affected by CVE-2015-7536 via org.jenkins-ci.main:jenkins-core (>=1.626 <=1.639)

org.jenkins-ci.main:jenkins-core MAVEN version =1.626, =0.3, =1.2, =1.1.2, =1.626, =1.626, =0.2.0, =1.0, =1.1.0, =0.1, =0.2, =0.1, =0.3 - org.jenkins-ci.plugins:icn-plugin-loader =1.0 and more Source cves: CVE-2015-7536 Source advisory: OSV:GHSA-X3P3-929J-PQ66...

anymail-history (=0.1.8), bmds-ui (>=24.1.0 <=25.1.0) +31 more potentially affected by CVE-2018-1000089 via django-anymail (>=0.9.0 <=15.0.0)

django-anymail PYPI version =0.9.0, =24.1.0, =0.4.10, =2.18.0, =0.1.3, =1.0.5, =0.1.0, =0.5.34, =0.1.0a1, =0.0.1, =1.2.0, =2.1.0, =1.0.0, =1.4.3 and more Source cves: CVE-2018-1000089 Source advisory: OSV:GHSA-QH9X-MC42-VG4G...

org.jenkins-ci.plugins:gerrit-verify-status-reporter (>=0.0.2 <=0.0.3), org.jenkins-ci.plugins:msginject (>=0.1.0 <=0.1.1) +1 more potentially affected by CVE-2018-1000106 via com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.14.0 <=2.22.0)

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger MAVEN version =2.14.0, =0.0.2, =0.1.0, =1.0, =2.4.6 Source cves: CVE-2018-1000106 Source advisory: OSV:GHSA-4VF2-CM23-RF4C...

be.objectify:objectify-struts2-tags (=1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1 <=1.2.2) +62 more potentially affected by CVE-2010-1870 via org.apache.struts:struts2-core (>=2.0.5 <=2.1.8.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =1.2.1, =0.6, =2.1.0, =1.8.3, =2.1.0, =2.0.0, =2.3.1 - com.toolazydogs.shiro:shiro-struts2 =1.0 and more Source cves: CVE-2010-1870 Source advisory: OSV:GHSA-X5FC-PGPX-59J5...

ae.teletronics.nlp:entityextraction (=1.3), ae.teletronics.nlp:w2vec (=1.0) +2821 more potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (>=0.23.10 <=2.6.5)

org.apache.hadoop:hadoop-client MAVEN version =0.23.10, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.0.25, =0.0.25, =0.0.25, =0.0.1, =0.0.1, =0.42.1, =0.2.0, =1.6.13 and more Source cves: CVE-2017-3162 Source advisory: OSV:GHSA-PR9X-QMP5-J3RR...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0 <=0.5.21), at.chrl:chrl-jms (=1.1.0) +3935 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (>=4.0.1.RELEASE <=5.2.21.RELEASE)

org.springframework:spring-messaging MAVEN version =4.0.1.RELEASE, =0.5.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner =0.3 and more Source cves: CVE-2022-22971 Source advisory: OSV:GHSA-RQPH-VQWM-22VC...

Palantir Foundry Issues 日志信息泄露漏洞

Palantir is a data platform from Palantir, Inc. that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A log message disclosure vulnerability exists in Palantir Foundry Issues service versions 2.244.0 through 2.249.0, which could...

appyter (>=0.18.3 <=0.18.11), chronix2grid (>=0.1.0rc1 <=1.0.2) +22 more potentially affected by CVE-2022-24757 via jupyter-server (>=0.0.5 <=1.13.5)

jupyter-server PYPI version =0.0.5, =0.18.3, =0.1.0rc1, =0.0.1.dev7, =3.0.0b2, =2.0.0b1, =0.1.0, =0.18.0, =0.2.0, =0.0.18, =0.2.1, =0.0.2, =0.1.0, =4.3.2 and more Source cves: CVE-2022-24757 Source advisory: OSV:PYSEC-2022-179...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by CVE-2022-21727 via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-21727 Source advisory: OSV:GHSA-C6FH-56W7-FVJW...