com.devonfw.cobigen:tsplugin (2.2.0), net.sf.ahtutils:ahtutils-jsf (>=0.2.4, <=0.2.5) +30 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (2.2.1.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.2.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.devonfw.cobigen:tsplugin 2.2.0 - net.sf.ahtutils:ahtutils-jsf =0.2.4, =1.26-rc1,...

org.chtijbug.drools:guvnor-jaxb-entities (5.6.2.chtijbug), org.drools:guvnor-jaxb-entities (>=5.6.0.cr1, <=5.6.0.final) +18 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (2.2.3.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.2.3.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.chtijbug.drools:guvnor-jaxb-entities 5.6.2.chtijbug - org.drools:guvnor-jaxb-entities...

org.jboss.resteasy:async-http-servlet-3.0 (2.3-rc1), org.jboss.resteasy:examples-jsapi (2.3-rc1) +17 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (2.3-rc1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:async-http-servlet-3.0 2.3-rc1 - org.jboss.resteasy:examples-jsapi 2.3-r...

com.woorea:resteasy-connector (>=3.0.0, <=3.2.7), org.chtijbug.drools:drools-framework-rest-guvnor (>=drools-framework-parent-1.5.3, <=1.5.2) +28 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (2.3.2.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.woorea:resteasy-connector =3.0.0, =drools-framework-parent-1.5.3,...

com.redhat.lightblue.client:lightblue-client-integration-test (>=1.4.0, <=5.4.0), com.thoughtworks.inproctester:inproctester-resteasy (>=1.0.13, <=1.0.15) +37 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (2.3.3.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.redhat.lightblue.client:lightblue-client-integration-test =1.4.0, =1.0.13, =1.0.13,...

io.apiman:apiman-distro-db (>=1.2.0.beta1, <=1.2.1.final), io.apiman:apiman-distro-db-es (>=1.2.0.beta1, <=1.2.1.final) +141 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (2.3.10.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - io.apiman:apiman-distro-db =1.2.0.beta1, =1.2.0.beta1, =1.2.0.beta2, =1.2.0.beta2,...

be.valuya:ovh-sms-client (1.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (1.1.9) +397 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (>=3.0-beta-1, <=3.0.10.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version =3.0-beta-1, =0.2.0, =1.1.11, =1.1.11, =1.1.16, =0.2.0, =0.2.0, =1.0.0, =0.1.0, =0.0.1-rc1, =0.2.0 and more Source cves: CVE-2014-7839 Source advisory: GHSA-PC54-PCHM-XCW6...

org.jboss.resteasy:abdera-atom-provider (1.2.ga), org.jboss.resteasy:async-http-servlet-3.0 (1.2.ga) +7 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (1.2.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 1.2.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 1.2.ga - org.jboss.resteasy:async-http-servlet-3.0...

Mozilla Firefox Security Advisory (MFSA2017-24) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2020-7839 MarkAny MaEPSBroker Command Injection Vulnerability

In MaEPSBroker 2.5.0.31 and prior, a command injection vulnerability caused by improper input validation checks when parsing brokerCommand parameter...

CVE-2020-7839

CVE-2020-7839 affects MarkAny MaEPSBroker (versions up to 2.5.0.31 and earlier). The vulnerability is a command injection caused by improper input validation in the parsing of the brokerCommand parameter. Impact is described as a command injection vulnerability with high severity; CVSS metrics in...

CVE-2019-7839

creationtimestamp| type| source ---|---|--- 2019-08-03 15:43:39+00:00| published-proof-of-concept| https://t.me/antichat/6114 2026-07-29 12:01:52+00:00| seen| Telegram/1ir3OXP8WlPXMb-rmir5-DY6551qukLA9yekoWE8AQik 2026-07-30 00:02:04+00:00| seen| Telegram/1ir3OXP8WlPXMb-rmir5-DY6551qukLA9yekoWE8AQ...

Adobe ColdFusion < 11.x < 11u19 / 2016.x < 2016u11 / 2018.x < 2018u4 Multiple Vulnerabilities (APSB19-27)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 11.x update 19, 2016.x update 11, or 2018.x update 4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-27 advisory. - File extension blacklist bypass potentially leading to Arbitrary...

CVE-2019-7839

ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7839

Adobe ColdFusion is affected by a command injection vulnerability (CVE-2019-7839) in Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier. Successful exploitation could result in arbitrary code execution. The issue is documented across multiple sources in 2019 advisories (e.g., ...

Adobe ColdFusion Code Injection Vulnerability (APSB19-27)

Adobe ColdFusion is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion"; i...

CVE-2018-7839

A Cryptographic Issue CWE-310 vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure...

CVE-2018-7839

CVE-2018-7839 affects Schneider Electric IIoT Monitor 3.1.38 and is caused by a hard-coded cryptographic key in the AESEncryption component, leading to potential information disclosure. The risk context in the connected docs notes a cryptographic issue with confidentiality impact (C–H) and cites ...

Schneider Electric IIoT Monitor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: IIoT Monitor --------- Begin Update A Part 1 of 2 -------- Vulnerabilities: Path Traversal, Unrestricted Upload of File with Dangerous Type, XXE, Cryptographic Issues...

CVE-2017-7839

Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting self-XSS attacks where users are...