activemq:activemq (1.1), activemq:activemq-core (3.2) +583 more potentially affected by CVE-2015-7501 via commons-collections:commons-collections (2.1)

commons-collections:commons-collections MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on commons-collections:commons-collections and may be impacted: - activemq:activemq 1.1 - activemq:activemq-core 3.2 - activemq:activemq-gbean 3.2 -...

br.com.caelum.stella:hibernate-persistence-example (>=1.0, <=1.2), br.com.caelum.stella:vraptor-validator-example (>=1.0, <=1.2) +284 more potentially affected by CVE-2015-7501 via commons-collections:commons-collections (2.1.1)

commons-collections:commons-collections MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on commons-collections:commons-collections and may be impacted: - br.com.caelum.stella:hibernate-persistence-example =1.0, =1.0, =1.0.0, =1.0-beta,...

acegisecurity:acegi-security (>=0.7.0, <=0.9.0), acegisecurity:acegi-security-cas (>=0.7.0, <=0.9.0) +24662 more potentially affected by CVE-2015-7501 via commons-collections:commons-collections (>=3.0, <=3.2.1)

commons-collections:commons-collections MAVEN version =3.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.0.1, =0.6.0, =0.12.0 - ai.grakn.kgms:client 1.4.3 - ai.grakn.kgms:console 1.4.3 and more Source cves: CVE-2015-7501 Source advisory: OSV:GHSA-FJQ5-5J5F-MVXH...

acegisecurity:acegi-security (>=0.7.0, <=0.9.0), acegisecurity:acegi-security-cas (>=0.7.0, <=0.9.0) +24662 more potentially affected by CVE-2015-7501 via commons-collections:commons-collections (>=3.0, <=3.2.1)

commons-collections:commons-collections MAVEN version =3.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.0.1, =0.6.0, =0.12.0 - ai.grakn.kgms:client 1.4.3 - ai.grakn.kgms:console 1.4.3 and more Source cves: CVE-2015-7501 Source advisory: GHSA-FJQ5-5J5F-MVXH...

net.osgiliath.framework:net.osgiliath.features.karaf-features-full (>=0.0.1, <=0.0.3), net.osgiliath.framework:net.osgiliath.features.karaf-features-jpa (>=0.0.1, <=0.0.3) +48 more potentially affected by CVE-2015-7501 via org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections (>=3.2.1_1, <=3.2.1_3)

org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections MAVEN version =3.2.11, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.2.0, =1.0.2, =1.0.8 - org.frie...

be.ordina:microservices-dashboard-server (1.0.1), br.com.ingenieux:apigateway-maven-plugin (>=1.5.1, <=1.5.6) +1495 more potentially affected by CVE-2015-7501 via org.apache.commons:commons-collections4 (4.0)

org.apache.commons:commons-collections4 MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-collections4 and may be impacted: - be.ordina:microservices-dashboard-server 1.0.1 -...

be.ordina:microservices-dashboard-server (1.0.1), br.com.ingenieux:apigateway-maven-plugin (>=1.5.1, <=1.5.6) +1495 more potentially affected by CVE-2015-7501 via org.apache.commons:commons-collections4 (4.0)

org.apache.commons:commons-collections4 MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-collections4 and may be impacted: - be.ordina:microservices-dashboard-server 1.0.1 -...

Jenkins hyper.sh Commons Plugin stores credentials in plain text

Jenkins Hyper.sh Commons Plugin stores credentials unencrypted in its global configuration file sh.hyper.plugins.hypercommons.Tools.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

sh.hyper.plugins:hyper-build-step (>=0.1.2, <=0.1.5), sh.hyper.plugins:hyper-slaves (>=0.1.0, <=0.1.7) potentially affected by CVE-2019-1003074 via sh.hyper.plugins:hyper-commons (>=0.1.2, <=0.1.5)

sh.hyper.plugins:hyper-commons MAVEN version =0.1.2, =0.1.2, =0.1.0, =0.1.7 Source cves: CVE-2019-1003074 Source advisory: OSV:GHSA-7MFP-938R-FCFJ...

sh.hyper.plugins:hyper-build-step (>=0.1.2, <=0.1.5), sh.hyper.plugins:hyper-slaves (>=0.1.0, <=0.1.7) potentially affected by CVE-2019-1003074 via sh.hyper.plugins:hyper-commons (>=0.1.2, <=0.1.5)

sh.hyper.plugins:hyper-commons MAVEN version =0.1.2, =0.1.2, =0.1.0, =0.1.7 Source cves: CVE-2019-1003074 Source advisory: GHSA-7MFP-938R-FCFJ...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

GHSA-3832-9276-X7GF Improper Certificate Validation in Apache Commons HttpClient

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +14009 more potentially affected by CVE-2012-5783 via commons-httpclient:commons-httpclient (>=3.0, <=20020423)

commons-httpclient:commons-httpclient MAVEN version =3.0, =0.0.1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev,...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +13979 more potentially affected by CVE-2012-5783 via commons-httpclient:commons-httpclient (>=3.0, <=3.1-jenkins-3)

commons-httpclient:commons-httpclient MAVEN version =3.0, =0.0.1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev,...

Uncontrolled Resource Consumption in Apache Commons Compress

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

GHSA-6FXM-66HQ-FC96 Uncontrolled Resource Consumption in Apache Commons Compress

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

ai.databand.azkaban:azkaban-web-server (3.18.0), cloud.orbit:orbit-mongodb (>=0.8.0, <=0.9.0) +696 more potentially affected by CVE-2012-2098 via org.apache.commons:commons-compress (>=1.0, <=1.4)

org.apache.commons:commons-compress MAVEN version =1.0, =0.8.0, =5.6.100, =2.0.6, =1.0.10, =1.0.8, =0.1.2, =0.1.2, =1.0.2, =0.23.3-public, =0.23.3-public, =0.52.3-public and more Source cves: CVE-2012-2098 Source advisory: OSV:GHSA-6FXM-66HQ-FC96...

org.springframework:spring-portlet (2.0.3), org.springframework:spring-remoting (2.0.3) +4 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0.3)

org.springframework:spring-web MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0.3 - org.springframework:spring-remoting 2.0.3 -...

org.springmodules:spring-modules-jakarta-commons (0.7), org.springmodules:spring-modules-osworkflow (0.7) potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (2.0.1)

org.springframework:spring-webmvc MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons 0.7 -...

org.springmodules:spring-modules-jakarta-commons (>=0.8, <=0.8a), org.springmodules:spring-modules-osworkflow (>=0.8, <=0.8a) potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (2.0.3)

org.springframework:spring-webmvc MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons =0.8, =0.8, =0.8a Source cves: CVE-2014-0054...