ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +1065 more potentially affected by CVE-2026-41245 via com.github.junrar:junrar (>=0.7, <=7.5.8)

com.github.junrar:junrar MAVEN version =0.7, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.9.2 - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 - ai.mattmann.mnemosyne:cas-pge 1.11.0 - ai.mattmann.mnemosyne:cas-product 1.11...

cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +99 more potentially affected by CVE-2026-41245 via com.github.junrar:junrar (2.0.0)

com.github.junrar:junrar MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - cloud.testload:jmeter-clickhouse-listener 2.00 - com.bobpaulin.jmeter:aws-include-controller-plugin 0.0.1 -...

ai.stainless:grails-tika (0.1.0), com.antkorwin:mimetype (>=0.1, <=0.2) +113 more potentially affected by CVE-2026-41245 via com.github.junrar:junrar (4.0.0)

com.github.junrar:junrar MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - ai.stainless:grails-tika 0.1.0 - com.antkorwin:mimetype =0.1, =0.1.2, =0.2.0, =0.7.0 and more Source cves:...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +631 more potentially affected by CVE-2026-41245 via com.github.junrar:junrar (>=7.4.0, <=7.5.8)

com.github.junrar:junrar MAVEN version =7.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41245 Source advisory: OSV:GHSA-HF5P-Q87M-CRJ7...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +631 more potentially affected by CVE-2026-41245 via com.github.junrar:junrar (>=7.4.0, <=7.5.8)

com.github.junrar:junrar MAVEN version =7.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41245 Source advisory: GHSA-HF5P-Q87M-CRJ7...

CVE-2021-41245

Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.6 and 3.0.0, CSRF tokens generated by privUITransactionFile aren't properly checked. Versions 2.7.6 and 3.0.0 contain a patch for this issue. As a workaround, use the session implementation by adding in the iTop conf...

EUVD-2025-41245

Malicious code in dewi-pecel55-sluey npm...

CVE-2025-41245

creationtimestamp| type| source ---|---|--- 2025-09-30 23:35:51+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m23ov7qisc2b 2025-10-01 04:53:38+00:00| seen| https://bsky.app/profile/samilaiho.com/post/3m24aneihpk2f 2025-10-30 18:05:03+00:00| seen|...

CVE-2025-41245

VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations...

CVE-2024-41245

An Incorrect Access Control vulnerability was found in /smsa/viewteachers.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view TEACHER details...

CVE-2024-41245

creationtimestamp| type| source ---|---|--- 2024-08-07 20:19:51+00:00| seen| https://t.me/cvedetector/2723...

CVE-2022-41245

creationtimestamp| type| source ---|---|--- 2022-09-21 20:41:21+00:00| seen| https://t.me/cibsecurity/50210 2025-10-06 07:38:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2j46vhouyz2...

CVE-2022-41245

A cross-site request forgery CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2022-41245

A cross-site request forgery CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2022-41245

CVE-2022-41245 concerns the Jenkins Worksoft Execution Manager Plugin (versions 10.0.3.503 and earlier). The issue is a CSRF vulnerability that allows an attacker with Overall/Read permission to cause Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtaine...

CVE-2021-41245

creationtimestamp| type| source ---|---|--- 2022-04-05 18:27:57+00:00| seen| https://t.me/cibsecurity/40166...

CVE-2021-41245 Possible Cross-Site Request Forgery in Combodo iTop

Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.6 and 3.0.0, CSRF tokens generated by privUITransactionFile aren't properly checked. Versions 2.7.6 and 3.0.0 contain a patch for this issue. As a workaround, use the session implementation by adding in the iTop conf...