nz.net.osnz.composite:composite-spring-boot-tomcat (1.2), org.apache.tomcat.embed:tomcat-embed-jasper (>=9.0.1, <=9.0.4) +2 more potentially affected by CVE-2018-1304 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =9.0.1, =9.0.1, =2.11.0, =3.8.2 Source cves: CVE-2018-1304 Source advisory: OSV:GHSA-6RXJ-58JH-436R...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +281 more potentially affected by CVE-2018-1304 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.85)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2018-1304 Source advisory: OSV:GHSA-6RXJ-58JH-436R...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +185 more potentially affected by CVE-2018-11784 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.23, <=7.0.90)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.23, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 - com.definesys.mpaas:query-weblogic 1.0.0 and more Source cves: CVE-2018-11784 Source advisory: OSV:GHSA-5Q99-F34M-67...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +185 more potentially affected by CVE-2018-11784 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.23, <=7.0.90)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.23, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 - com.definesys.mpaas:query-weblogic 1.0.0 and more Source cves: CVE-2018-11784 Source advisory: GHSA-5Q99-F34M-67GC...

com.brienwheeler.apps:apps-tomcat (>=1.10, <=1.11), com.brienwheeler.dist:dist-tomcat (>=1.10, <=1.11) +19 more potentially affected by CVE-2018-11784 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =1.10, =1.10, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =0.60.0, =0.60.0, =5.0.19, =1.0.0-rc, =5.0.5, =1.2, =9.0.1, =9.0.11 and more Source cves: CVE-2018-11784 Source advisory: GHSA-5Q99-F34M-67GC...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), am.ik.servicebroker:cloud-karafka-service-broker (>=0.0.2, <=0.0.3) +3030 more potentially affected by CVE-2018-11784 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.33)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =0.0.1, =0.1.0, =1.0.0-rc, =1.1.0 - ca.pjer:parse-security-spring-boot-starter 1.1.0 and more Source cves: CVE-2018-11784 Source advisory: MEND:CVE-2018-11784...

Linux kernel information disclosure vulnerability (CNVD-2018-24478)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'pcpuembedfirstchunk' function in the mm/percpu.c file in Linux kernel versions 4.14.14 and earlier. A local attacker can exploi...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +1041 more potentially affected by CVE-2018-1336 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.0-rc1, <=8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.0-rc1, =1, =0.0.6, =0.0.10, =2.0, =0.0.21, =0.0.21, =0.0.21, =0.0.25, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =1.1, =1.1.2 and more Source cves: CVE-2018-1336 Source advisory: MEND:CVE-2018-1336...

com.brienwheeler.apps:apps-tomcat (>=1.10, <=1.11), com.brienwheeler.dist:dist-tomcat (>=1.10, <=1.11) +19 more potentially affected by CVE-2018-8037 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m9, <=9.0.8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m9, =1.10, =1.10, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =0.60.0, =0.60.0, =1.6-beta.2, =5.0.5, =1.2, =9.0.0.m9, =9.0.0.m9, =9.0.8 and more Source cves: CVE-2018-8037 Source advisory: MEND:CVE-2018-8037...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), am.ik.servicebroker:cloud-karafka-service-broker (>=0.0.2, <=0.0.3) +2934 more potentially affected by CVE-2018-8037 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.5, <=8.5.31)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.5, =1.0.0, =0.0.2, =0.0.3, =0.0.1, =0.2.0, =1.0.3, =0.2.1, =0.1.1, =0.1.1, =0.7, =0.8 and more Source cves: CVE-2018-8037 Source advisory: MEND:CVE-2018-8037...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +1041 more potentially affected by CVE-2018-8014 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.0-rc1, <=8.0.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.0-rc1, =1, =0.0.6, =0.0.10, =2.0, =0.0.21, =0.0.21, =0.0.21, =0.0.25, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =1.1, =1.1.2 and more Source cves: CVE-2018-8014 Source advisory: MEND:CVE-2018-8014...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), am.ik.servicebroker:cloud-karafka-service-broker (>=0.0.2, <=0.0.3) +2995 more potentially affected by CVE-2018-8014 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.31)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =0.0.1, =0.1.0, =1.0.0-rc, =1.1.0 - ca.pjer:parse-security-spring-boot-starter 1.1.0 and more Source cves: CVE-2018-8014 Source advisory: MEND:CVE-2018-8014...

chromium-browser: Incorrect handling of plug-ins by Service Worker

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

alchemy-embed-medias (>=0.4.0, <=0.5.0), globe-iframe-resizer (>=0.0.0, <=0.0.2) +4 more potentially affected by CVE-2018-1000086 via pym.js (0.4.5)

pym.js NPM version 0.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pym.js and may be impacted: - alchemy-embed-medias =0.4.0, =0.0.0, =0.2.1, =0.1.0, =0.3.0, =1.0.0, =4.0.0 Source cves: CVE-2018-1000086 Source advisory: GHSA-82GW-PQF7-Q3J2...

alchemy-embed-medias (>=0.4.0, <=0.5.0), globe-iframe-resizer (>=0.0.0, <=0.0.2) +4 more potentially affected by CVE-2018-1000086 via pym.js (0.4.5)

pym.js NPM version 0.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pym.js and may be impacted: - alchemy-embed-medias =0.4.0, =0.0.0, =0.2.1, =0.1.0, =0.3.0, =1.0.0, =4.0.0 Source cves: CVE-2018-1000086 Source advisory: MEND:CVE-2018-1000086...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +1041 more potentially affected by CVE-2018-1304 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1, =0.0.6, =0.0.10, =2.0, =0.0.21, =0.0.21, =0.0.21, =0.0.25, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =1.1, =1.1.2 and more Source cves: CVE-2018-1304 Source advisory: MEND:CVE-2018-1304...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +2067 more potentially affected by CVE-2018-1304 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.27)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =1.0.0, =1, =1, =1, =1, =1, =0.0.1, =0.1.0, =1.0.0-rc, =0.2.1, =0.1.1, =0.1.2 and more Source cves: CVE-2018-1304 Source advisory: MEND:CVE-2018-1304...

nz.net.osnz.composite:composite-spring-boot-tomcat (1.2), org.apache.tomcat.embed:tomcat-embed-jasper (>=9.0.1, <=9.0.4) +2 more potentially affected by CVE-2018-1304 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =9.0.1, =9.0.1, =2.11.0, =3.8.2 Source cves: CVE-2018-1304 Source advisory: MEND:CVE-2018-1304...

com.aol.microservices:micro-tomcat (>=0.83, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.91.11) +15 more potentially affected by CVE-2018-1305 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =0.83, =0.83, =0.1.0, =1.0.0, =1.0.0, =1.6-beta.2, =0.9.4, =9.0.0.m1, =9.0.0.m1, =2.11.0, =3.8.2 - us.levk:rserve-client 0.0.3 and more Source cves: CVE-2018-1305 Source advisory: MEND:CVE-2018-1305...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +281 more potentially affected by CVE-2018-1305 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2018-1305 Source advisory: MEND:CVE-2018-1305...