be.tomcools:rickroll-security-spring-boot-starter (3.0.0), berlin.yuna:paginator (>=0.1.43, <=0.1.44) +322 more potentially affected by CVE-2022-45143 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0, <=10.1.1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0, =0.1.43, =2.0.0, =2023.0.0.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.0, =2.5.2, =2.5, =2.5.3 - cn.xusc:trace-recorder-dashboard-base 2.5.3 and more Source cves: CVE-2022-45143 Source advisory: OSV:GHSA-RQ2W-37H9-VG94...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.platon.commons:distributed-lock-example (>=1.4.2, <=1.4.3) +6908 more potentially affected by CVE-2022-45143 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.40, <=9.0.68)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.40, =4.4.0.2, =1.4.2, =1.6.6, =j8.2.3.2, =j8.2.3.2, =j8.2.3.2, =1.1.0-rc1, =5.3.1, =1.13.0, =1.13.0, =1.2.5.release, =1.2.5.release, =2.0.9.release - be.tomcools:rickroll-security-spring-boot-starter 2.6.7 and more Source cves:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.platon.commons:distributed-lock-example (>=1.4.2, <=1.4.3) +6908 more potentially affected by CVE-2022-45143 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.40, <=9.0.68)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.40, =4.4.0.2, =1.4.2, =1.6.6, =j8.2.3.2, =j8.2.3.2, =j8.2.3.2, =1.1.0-rc1, =5.3.1, =1.13.0, =1.13.0, =1.2.5.release, =1.2.5.release, =2.0.9.release - be.tomcools:rickroll-security-spring-boot-starter 2.6.7 and more Source cves:...

com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +4 more potentially affected by CVE-2022-45143 via org.apache.tomcat.embed:tomcat-embed-core (8.5.83)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =1.3.14 Source cves...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.platon.commons:distributed-lock-example (>=1.4.2, <=1.4.3) +6908 more potentially affected by CVE-2022-45143 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.40, <=9.0.68)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.40, =4.4.0.2, =1.4.2, =1.6.6, =j8.2.3.2, =j8.2.3.2, =j8.2.3.2, =1.1.0-rc1, =5.3.1, =1.13.0, =1.13.0, =1.2.5.release, =1.2.5.release, =2.0.9.release - be.tomcools:rickroll-security-spring-boot-starter 2.6.7 and more Source cves:...

be.tomcools:rickroll-security-spring-boot-starter (3.0.0), berlin.yuna:paginator (>=0.1.43, <=0.1.44) +322 more potentially affected by CVE-2022-45143 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0, <=10.1.1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0, =0.1.43, =2.0.0, =2023.0.0.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.0, =2.5.2, =2.5, =2.5.3 - cn.xusc:trace-recorder-dashboard-base 2.5.3 and more Source cves: CVE-2022-45143 Source advisory: MEND:CVE-2022-45143...

Cross site scripting

The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during a forum response in versions up to, and including, 6.8 due to insufficient input sanitization and output escaping that makes injecting object and embed tags possible...

PT-2022-36759 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to an index-out-of-bounds crash. Technical details include the crash type and state, which involve functions such as str init embed, str new, and mrb str new...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4099 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.82)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2022-42252 Source...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +10907 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.67)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2022-42252 Source advisory: GHSA-P22X-G9PX-3945...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4099 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.82)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2022-42252 Source...

ca.bc.gov.tno:dal-db (>=0.0.11-alpha, <=0.0.17-alpha), cn.taketoday:today-framework (4.0.0-draft.1) +22 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.26)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.11-alpha, =0.0.1, =1.3.3, =2.1.1, =2.1.0, =2.1.3, =2.1.0, =2.1.0, =0.5.0-release, =3.4.8, =3.5.4-jdk11 - io.axual.platform.test:axual-platform-test-standalone 5.8.0 and more Source cves: CVE-2022-42252 Source advisory:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +10907 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.67)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2022-42252 Source advisory: OSV:GHSA-P22X-G9PX-394...

com.astrapay:spring-qris (>=1.15, <=1.22), com.capitalone.dashboard:core (4.0.1) +7 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.0)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =1.15, =3.0.0, =10.1.0-m1, =10.1.0-m1, =3.18.0, =3.20.1 Source cves: CVE-2022-42252 Source advisory: GHSA-P22X-G9PX-3945...

ca.bc.gov.tno:dal-db (>=0.0.11-alpha, <=0.0.17-alpha), cn.taketoday:today-framework (4.0.0-draft.1) +22 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.26)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.11-alpha, =0.0.1, =1.3.3, =2.1.1, =2.1.0, =2.1.3, =2.1.0, =2.1.0, =0.5.0-release, =3.4.8, =3.5.4-jdk11 - io.axual.platform.test:axual-platform-test-standalone 5.8.0 and more Source cves: CVE-2022-42252 Source advisory:...

com.astrapay:spring-qris (>=1.15, <=1.22), com.capitalone.dashboard:core (4.0.1) +7 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.0)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =1.15, =3.0.0, =10.1.0-m1, =10.1.0-m1, =3.18.0, =3.20.1 Source cves: CVE-2022-42252 Source advisory: OSV:GHSA-P22X-G9PX-3945...

com.astrapay:spring-qris (>=1.15, <=1.22), com.capitalone.dashboard:core (4.0.1) +7 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.0)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =1.15, =3.0.0, =10.1.0-m1, =10.1.0-m1, =3.18.0, =3.20.1 Source cves: CVE-2022-42252 Source advisory: MEND:CVE-2022-42252...

ca.bc.gov.tno:dal-db (>=0.0.11-alpha, <=0.0.17-alpha), cn.taketoday:today-framework (4.0.0-draft.1) +22 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.26)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.11-alpha, =0.0.1, =1.3.3, =2.1.1, =2.1.0, =2.1.3, =2.1.0, =2.1.0, =0.5.0-release, =3.4.8, =3.5.4-jdk11 - io.axual.platform.test:axual-platform-test-standalone 5.8.0 and more Source cves: CVE-2022-42252 Source advisory:...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4099 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.82)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2022-42252 Source...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +10907 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.67)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2022-42252 Source advisory: MEND:CVE-2022-42252...