CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

Malicious Package

Overview mattermost-webapp is a malicious package. This package contained malicious code and was removed from the registry by the npm security team. Remediation Avoid using all malicious instances of the mattermost-webapp package...

org.apereo.cas:cas-management-webapp (5.0.0.rc1), org.apereo.cas:cas-management-webapp-support (5.0.0.rc1) +69 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0.rc1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc1 -...

org.apereo.cas:cas-management-webapp (5.0.6), org.apereo.cas:cas-management-webapp-support (5.0.6) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.6)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.6 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.3), org.apereo.cas:cas-management-webapp-support (5.0.3) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.3)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.3 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.5), org.apereo.cas:cas-management-webapp-support (5.0.5) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.5)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.5 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.1.0), org.apereo.cas:cas-server-core (5.1.0) +113 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0 - org.apereo.cas:cas-server-core 5.1.0 -...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc3 Source cves: CVE-2021-42567 Sour...

org.apereo.cas:cas-management-webapp (5.0.0.rc3), org.apereo.cas:cas-management-webapp-support (5.0.0.rc3) +75 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0.rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc3 -...

org.apereo.cas:cas-management-webapp (5.0.4), org.apereo.cas:cas-management-webapp-support (5.0.4) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.4)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.4 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.8), org.apereo.cas:cas-management-webapp-support (5.0.8) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.8)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.8 - org.apereo.cas:cas-management-webapp-support...

openSUSE 15 Security Update : opera (openSUSE-SU-2021:1488-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1488-1 advisory. - Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to...

Content Spoofing

chrome is vulnerable to content spoofing. The vulnerability exists due to an Inappropriate implementation in WebApp Installer in Google Chrome...

CVE-2021-37995

Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...

DEBIAN-CVE-2021-37995

Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...

UBUNTU-CVE-2021-37995

Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2021-37995

CVE-2021-37995 affects Chromium-based browsers (e.g., Google Chrome/Chromium) via an inappropriate implementation in the WebApp Installer before 95.0.4638.54. A remote attacker could potentially overlay and spoof the Omnibox (URL bar) contents with a crafted HTML page. The vulnerability is part o...

CVE-2021-37995

Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2021-37995

Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...