com.hazelcast:hazelcast-all (1.9.4.5), com.hazelcast:hazelcast-client (1.9.4.5) +5 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (1.9.4.5)

com.hazelcast:hazelcast MAVEN version 1.9.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.5 - com.hazelcast:hazelcast-client 1.9.4.5 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (1.9.4.8), com.hazelcast:hazelcast-client (1.9.4.8) +30 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (1.9.4.8)

com.hazelcast:hazelcast MAVEN version 1.9.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.8 - com.hazelcast:hazelcast-client 1.9.4.8 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (2.0-rc2), com.hazelcast:hazelcast-client (2.0-rc2) +5 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (2.0-rc2)

com.hazelcast:hazelcast MAVEN version 2.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0-rc2 - com.hazelcast:hazelcast-client 2.0-rc2 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (2.0.4), com.hazelcast:hazelcast-client (2.0.4) +5 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (2.0.4)

com.hazelcast:hazelcast MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0.4 - com.hazelcast:hazelcast-client 2.0.4 - com.hazelcast:hazelcast-cloud 2.0.4 -...

com.hazelcast:hazelcast-all (1.9.4-rc1), com.hazelcast:hazelcast-client (1.9.4-rc1) +5 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (1.9.4-rc1)

com.hazelcast:hazelcast MAVEN version 1.9.4-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4-rc1 - com.hazelcast:hazelcast-client 1.9.4-rc1 -...

com.hazelcast:hazelcast-all (1.9.3.3), com.hazelcast:hazelcast-client (1.9.3.3) +5 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (1.9.3.3)

com.hazelcast:hazelcast MAVEN version 1.9.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.3.3 - com.hazelcast:hazelcast-client 1.9.3.3 - com.hazelcast:hazelcast-hibernat...

CVE-2022-30015

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

PT-2022-13705

Name of the Vulnerable Software and Affected Versions Turn off all comments WordPress plugin version 1.0 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the rows parameter is not properly sanitised and escaped before being outputted back in an admin...

Lumidek Associates Simple Food Website 跨站脚本漏洞

Lumidek Associates Simple Food Website is Simple Food Website CMS. A cross-site scripting vulnerability exists in Lumidek Associates Simple Food Website 1.0, which stems from a lack of filtering and escaping of field data in food/admin/allusers.php. The vulnerability can be exploited to conduct a...

PT-2022-19971

Name of the Vulnerable Software and Affected Versions Simple Food Website version 1.0 Description The issue allows a moderation to inject a Cross Site Scripting Payload in various fields on the 'http://127.0.0.1:1234/food/admin/all users.php' page, such as the Full Username field, resulting in...

CVE-2022-1192: Improper Neutralization of Input During Web Page Generation

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-21195

All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...

多款Hewlett Packard Enterprise产品命令注入漏洞

Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays are products of Hewlett Packard Enterprise.Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays is an adaptive flash array storage product.Hewlett Packard Enterprise Nimble Storage All Flash Arrays is an all-flash array storag...

PT-2022-14915 · Url-Regex · Url-Regex

Name of the Vulnerable Software and Affected Versions: url-regex versions all Description: The issue is related to Regular Expression Denial of Service ReDoS, which can cause CPU usage to crash. Recommendations: For url-regex version all, consider disabling the use of the url-regex package until ...

PT-2022-19455

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4 Description The implementation of tf.raw ops.SpaceToBatchND is vulnerable to an integer overflow. This...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=0.11.0, <=1.1.0-alpha.1), org.keycloak:keycloak-account-freemarker (>=1.0-alpha-2, <=1.0.5.final) +6 more potentially affected by CVE-2014-3652 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=1.0.5.final)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.11.0, =1.0-alpha-2, =1.0-beta-4, =1.0-beta-4, =1.0-alpha-1, =1.0-alpha-2, =1.0-alpha-2, =1.0-alpha-1-12062013, =1.0.5.final Source cves: CVE-2014-3652 Source advisory: GHSA-5R7W-PJX8-99QG...

eu.limetri.ygg:ygg-client (0.12), eu.limetri.ygg:ygg-client-installed (>=0.13, <=0.16) +76 more potentially affected by CVE-2014-3656 via org.keycloak:keycloak-core (>=1.0-alpha-1, <=1.0.5.final)

org.keycloak:keycloak-core MAVEN version =1.0-alpha-1, =0.13, =1.0.0.beta1, =0.11.0, =0.11.0, =0.11.0, =1.0.2, =3.1.0.cr1, =3.1.0.cr1, =1.0-alpha-2, =1.0-alpha-2, =1.0-alpha-1, =1.0-beta-4, =1.0-beta-1, =1.0-beta-1, =1.0.5.final and more Source cves: CVE-2014-3656 Source advisory:...

org.jclouds.provider:eucalyptus-partnercloud-ec2 (1.4.0-rc.2), org.jclouds:jclouds-all (1.4.0-rc.2) +1 more potentially affected by CVE-2013-4766 via org.jclouds.api:eucalyptus (1.4.0-rc.2)

org.jclouds.api:eucalyptus MAVEN version 1.4.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jclouds.api:eucalyptus and may be impacted: - org.jclouds.provider:eucalyptus-partnercloud-ec2 1.4.0-rc.2 - org.jclouds:jclouds-all 1.4.0-rc.2 -...

org.jclouds.provider:eucalyptus-partnercloud-ec2 (1.5.0-alpha.1), org.jclouds:jclouds-all (1.5.0-alpha.1) +1 more potentially affected by CVE-2013-4766 via org.jclouds.api:eucalyptus (1.5.0-alpha.1)

org.jclouds.api:eucalyptus MAVEN version 1.5.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jclouds.api:eucalyptus and may be impacted: - org.jclouds.provider:eucalyptus-partnercloud-ec2 1.5.0-alpha.1 - org.jclouds:jclouds-all...

org.jclouds.provider:eucalyptus-partnercloud-ec2 (1.5.0-alpha.6), org.jclouds:jclouds-all (1.5.0-alpha.6) +1 more potentially affected by CVE-2013-4766 via org.jclouds.api:eucalyptus (1.5.0-alpha.6)

org.jclouds.api:eucalyptus MAVEN version 1.5.0-alpha.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jclouds.api:eucalyptus and may be impacted: - org.jclouds.provider:eucalyptus-partnercloud-ec2 1.5.0-alpha.6 - org.jclouds:jclouds-all...