com.cloudera.oryx:oryx-lambda-serving (>=2.3.0, <=2.5.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +65 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.21)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =2.3.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =0.0.4, =1.9.5, =1.2.0, =1.6.1 - io.antmedia:ant-media-server-common 1.6.0 and more Source cves: CVE-2017-12617 Source advisory: GHSA-XJGH-84HX-56C5...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +204 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.81)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-12617 Source advisory: OSV:GHSA-XJGH-84HX-56C5...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +204 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.81)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-12617 Source advisory: GHSA-XJGH-84HX-56C5...

com.cloudera.oryx:oryx-lambda-serving (>=2.3.0, <=2.5.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +65 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.21)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =2.3.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =0.0.4, =1.9.5, =1.2.0, =1.6.1 - io.antmedia:ant-media-server-common 1.6.0 and more Source cves: CVE-2017-12617 Source advisory: OSV:GHSA-XJGH-84HX-56C5...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.psi-probe:psi-probe-tomcat9 (3.0.0.rc2) +17 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.0.m27)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.8.2, =0.3.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.3.0, =1.0.0, =9.0.0.m1, =9.0.0.m27 and more Source cves: CVE-2017-12617 Source advisory: GHSA-XJGH-84HX-56C5...

ChakraCore RCE Vulnerability

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...

GHSA-8R5C-8V97-G7VH ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". The...

GHSA-C6R3-GHJW-HGRJ ChakraCore vulnerable to remote code execution

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.17, <=0.19), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.20, <=0.22) +9 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.411)

org.jenkins-ci.main:jenkins-core MAVEN version 1.411 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.17, =0.20, =1.7, =1.17, =1.18 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.3), org.jenkins-ci.main:jenkins-war (1.424.3) +4 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.424.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.3 - org.jenkins-ci.main:jenkins-war 1.424.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.532.1), org.jenkins-ci.main:jenkins-war (1.532.1) +25 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.532.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.532.1 - org.jenkins-ci.main:jenkins-war 1.532.1 -...

customhistory:customhistory (>=1.1, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.471) +6 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.471)

org.jenkins-ci.main:jenkins-core MAVEN version 1.471 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - customhistory:customhistory =1.1, =1.3 - org.jenkins-ci.main:jenkins-test-harness 1.471 -...

org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.468)

org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...

org.jenkins-ci.main:jenkins-test-harness (1.409.3), org.jenkins-ci.main:jenkins-war (1.409.3) +2 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.409.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.3 - org.jenkins-ci.main:jenkins-war 1.409.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.4), org.jenkins-ci.main:jenkins-war (1.424.4) +3 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.424.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.4 - org.jenkins-ci.main:jenkins-war 1.424.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.442), org.jenkins-ci.main:jenkins-war (1.442) +6 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.442)

org.jenkins-ci.main:jenkins-core MAVEN version 1.442 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.442 - org.jenkins-ci.main:jenkins-war 1.442 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.625.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2017-1000395 Source advisory: OSV:GHSA-WQV4-9GR3-3QGH...

org.jenkins-ci.main:jenkins-test-harness (1.597), org.jenkins-ci.main:jenkins-war (1.597) +4 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.597)

org.jenkins-ci.main:jenkins-core MAVEN version 1.597 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.597 - org.jenkins-ci.main:jenkins-war 1.597 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2017-1000395 Source advisory: GHSA-WQV4-9GR3-3QGH...