ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +4087 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.34)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2020-11996 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3974 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.54)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2020-11996 Source...

nz.net.osnz.composite:composite-spring-boot-tomcat (5.22), org.apache.tomcat.embed:tomcat-embed-jasper (>=10.0.0-m1, <=10.0.0-m4) +1 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m4 Source cves: CVE-2020-11996 Source advisory: MEND:CVE-2020-11996...

OSV-2020-54 Heap-buffer-overflow in OT::HintingDevice* hb_serialize_context_t::embed<OT::HintingDevice>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20211 Crash type: Heap-buffer-overflow READ Crash state: OT::HintingDevice hbserializecontextt::embed OT::HintingDevice::copy OT::Device::copy...

PT-2020-22386

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a problem in the hb serialize context t::embed function, specifically when...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3366 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-1938 Source...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-1938 Source advisory: GHSA-C9HW-WF7X-JP9J...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-1938 Source advisory: OSV:GHSA-C9HW-WF7X-JP9J...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4542 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2020-1938 Source advisory: OSV:GHSA-C9HW-WF7X-JP9J...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4542 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2020-1938 Source advisory: GHSA-C9HW-WF7X-JP9J...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3366 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-1938 Source...

am.ik.servicebroker:cloud-karafka-service-broker (0.1.0), ca.pjer:iam-spring-boot-starter (>=1.0.0, <=1.5.2) +900 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.14)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =1.0.0, =0.0.31, =0.0.31, =0.0.31, =0.0.31, =0.1.32, =0.1.31, =0.1.31, =0.1.31, =2.0.10, =2.0.11 and more Source cves: CVE-2019-0199 Source advisory: GHSA-QCXH-W3J9-58QR...

ai.ylyue:yue-library-base (finchley.sr2.sr1), ai.ylyue:yue-library-data-jdbc (finchley.sr2.sr1) +4014 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.37)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =0.0.6, =0.0.7 and more Source cves: CVE-2019-0199 Source advisory: GHSA-QCXH-W3J9-58QR...

am.ik.servicebroker:cloud-karafka-service-broker (0.1.0), ca.pjer:iam-spring-boot-starter (>=1.0.0, <=1.5.2) +900 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.14)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =1.0.0, =0.0.31, =0.0.31, =0.0.31, =0.0.31, =0.1.32, =0.1.31, =0.1.31, =0.1.31, =2.0.10, =2.0.11 and more Source cves: CVE-2019-0199 Source advisory: OSV:GHSA-QCXH-W3J9-58QR...

ai.ylyue:yue-library-base (finchley.sr2.sr1), ai.ylyue:yue-library-data-jdbc (finchley.sr2.sr1) +4014 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.37)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =0.0.6, =0.0.7 and more Source cves: CVE-2019-0199 Source advisory: OSV:GHSA-QCXH-W3J9-58QR...

DEBIAN-CVE-2020-4046

In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...

Hardcoded credentials

In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...

UBUNTU-CVE-2020-4046

In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...

CVE-2020-4046

In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...

CVE-2020-4046 Authenticated XSS through embed block in WordPress

In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...