3705 matches found
com.github.fanzezhen.common:common-security (>=0.0.1, <=2.0.3), com.github.fanzezhen:security (>=1.3.3, <=1.3.4.4) +6 more potentially affected by CVE-2020-9484 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.1, =1.3.3, =5.22, =10.0.0-m1, =10.0.0-m1, =3.15.0, =3.16.8 - su.boleyn.oj:oj-server 1.1.2 Source cves: CVE-2020-9484, CVE-2021-25329 Source advisory: MEND:CVE-2021-25329...
ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +286 more potentially affected by CVE-2020-9484 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.107)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-9484, CVE-2021-25329 Source advisory: MEND:CVE-2021-25329...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +6054 more potentially affected by CVE-2020-9484 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.40)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2020-9484,...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4032 more potentially affected by CVE-2021-25122 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.61)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2021-25122 Source...
com.github.fanzezhen.common:common-security (>=0.0.1, <=2.0.3), com.github.fanzezhen:security (>=1.3.3, <=1.3.4.4) +6 more potentially affected by CVE-2021-25122 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.1, =1.3.3, =5.22, =10.0.0-m1, =10.0.0-m1, =3.15.0, =3.16.8 - su.boleyn.oj:oj-server 1.1.2 Source cves: CVE-2021-25122 Source advisory: MEND:CVE-2021-25122...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +6633 more potentially affected by CVE-2021-25122 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.41)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2021-25122 Source...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4027 more potentially affected by CVE-2021-24122 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.59)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2021-24122 Source...
com.github.fanzezhen.common:common-security (>=0.0.1, <=2.0.3), com.github.fanzezhen:security (>=1.3.3, <=1.3.4.4) +4 more potentially affected by CVE-2021-24122 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0-m9)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.1, =1.3.3, =5.22, =10.0.0-m1, =10.0.0-m1, =10.0.0-m9 - org.jboss.arquillian.container:arquillian-tomcat-embedded-10 1.2.0.alpha1 Source cves: CVE-2021-24122 Source advisory: MEND:CVE-2021-24122...
DEBIAN-CVE-2020-28033
WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed...
UBUNTU-CVE-2020-28033
WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed...
CVE-2020-28033
WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed...
CVE-2020-28033
WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed...
CVE-2020-28033: Undefined Security Weakness
WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed...
Mozilla: X-Frame-Options bypass using object or embed tags
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
Joplin 1.0.245 - Arbitrary Code Execution (PoC)
Exploit Title: Joplin 1.0.245 - Arbitrary Code Execution PoC Date: 2020-09-21 Exploit Author: Ademar Nowasky Junior @nowaskyjr Vendor Homepage: https://joplinapp.org/ Software Link: https://github.com/laurent22/joplin/releases/download/v1.0.245/Joplin-Setup-1.0.245.exe Version: 1.0.190 to 1.0.245...
CVE-2020-15930
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag...
CVE-2020-15930
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag...
Cross site scripting
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag...