cn.hutool:hutool-bom (4.6.15) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.15)

cn.hutool:hutool-http MAVEN version 4.6.15 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.15 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-bom (4.6.16) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.16)

cn.hutool:hutool-http MAVEN version 4.6.16 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.16 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-bom (4.6.17) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.17)

cn.hutool:hutool-http MAVEN version 4.6.17 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.17 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3197 more potentially affected by CVE-2021-32012 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32012 Source advisory: GHSA-3X9F-74H4-2FQR...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3197 more potentially affected by CVE-2021-32013 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32013 Source advisory: OSV:GHSA-8VCR-VXM8-293M...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3197 more potentially affected by CVE-2021-32014 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32014 Source advisory: SNYK:JS-XLSX-1311139...

com.wavefront:proxy-test (>=999.0-rc3, <=9999.0), com.wavefront:proxy-test-2 (>=999.0, <=999.7) potentially affected by CVE-2021-20293 via org.jboss.resteasy:resteasy-bom (3.13.0.final)

org.jboss.resteasy:resteasy-bom MAVEN version 3.13.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-bom and may be impacted: - com.wavefront:proxy-test =999.0-rc3, =999.0, =999.7 Source cves: CVE-2021-20293 Source...

com.wavefront:proxy (>=11.0-rc3, <=11.0) potentially affected by CVE-2021-20293 via org.jboss.resteasy:resteasy-bom (3.13.2.final)

org.jboss.resteasy:resteasy-bom MAVEN version 3.13.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-bom and may be impacted: - com.wavefront:proxy =11.0-rc3, =11.0 Source cves: CVE-2021-20293 Source advisory:...

com.github.mswolfe:spring-query-filter (>=4.2.0, <=4.3.2), com.securenative.java:com.securenative.java (>=0.0.1, <=0.1.1) +1 more potentially affected by CVE-2020-5421 via org.springframework:spring-framework-bom (>=4.2.3.release, <=4.3.14.release)

org.springframework:spring-framework-bom MAVEN version =4.2.3.release, =4.2.0, =0.0.1, =0.1.1 - io.github.cyjishuang:swagger-mode 1.0 Source cves: CVE-2020-5421 Source advisory: OSV:GHSA-RV39-3QH7-9V7W...

com.github.mswolfe:spring-query-filter (>=4.2.0, <=4.3.2), com.securenative.java:com.securenative.java (>=0.0.1, <=0.1.1) +1 more potentially affected by CVE-2020-5421 via org.springframework:spring-framework-bom (>=4.2.3.release, <=4.3.14.release)

org.springframework:spring-framework-bom MAVEN version =4.2.3.release, =4.2.0, =0.0.1, =0.1.1 - io.github.cyjishuang:swagger-mode 1.0 Source cves: CVE-2020-5421 Source advisory: GHSA-RV39-3QH7-9V7W...

Information Disclosure

vaadin-bom is vulnerable to information disclosure. The OSGi integration allows an attacker to access application classes and resources on the server via a malicious HTTP request...

DEBIAN-CVE-2020-14040

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...

UBUNTU-CVE-2020-14040

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...

XML External Entity (XXE)

plesk/zf1 is vulnerable to XML external entity XXE. The library does not properly encode !ENTITY string in function heuristicScan in Security.php when threading is enabled during the Byteordermark BOM detection, allowing a malicious user to exploit this flaw by providing multibyte XML string or...

Fedora Update for jackson-bom FEDORA-2019-cf87377f5f

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for jackson-bom FEDORA-2019-99ff6aa32c

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SQL Injection Vulnerability in Kaixin Quote System V2.0 pr***.aspx Page

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

SQL Injection Vulnerability in Kaixin Quote System V2.0 da***.aspx Page

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

[SECURITY] Fedora 31 Update: jackson-bom-2.10.0-1.fc31

A "bill of materials" POM for Jackson dependencies...

Fedora Update for jackson-bom FEDORA-2019-b171554877

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...