org.wildfly.core:wildfly-core-dist (3.0.0.beta16), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta16) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.beta16)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.beta16 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta16 -...

org.wildfly.core:wildfly-core-dist (2.2.0.cr9), org.wildfly.core:wildfly-core-feature-pack (2.2.0.cr9) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (2.2.0.cr9)

org.wildfly.core:wildfly-host-controller MAVEN version 2.2.0.cr9 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 2.2.0.cr9 -...

org.wildfly.core:wildfly-core-dist (3.0.0.alpha16), org.wildfly.core:wildfly-core-feature-pack (3.0.0.alpha16) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.alpha16)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.alpha16 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.alpha16 -...

org.wildfly.core:wildfly-core-dist (3.0.4.final), org.wildfly.core:wildfly-core-feature-pack (3.0.4.final) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.4.final)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.4.final -...

org.wildfly.core:wildfly-core-dist (2.0.6.final), org.wildfly.core:wildfly-core-feature-pack (2.0.6.final) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (2.0.6.final)

org.wildfly.core:wildfly-host-controller MAVEN version 2.0.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 2.0.6.final -...

org.wildfly.core:wildfly-core-dist (5.0.0.alpha3), org.wildfly.core:wildfly-core-feature-pack (5.0.0.alpha3) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (5.0.0.alpha3)

org.wildfly.core:wildfly-host-controller MAVEN version 5.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 5.0.0.alpha3 -...

CVE-2022-29246

Azure RTOS USBX DFU UPLOAD vulnerability (CVE-2022-29246) allows a potential buffer overflow prior to version 6.1.11. If a DFU UPLOAD request carries a wLength greater than UX_SLAVE_REQUEST_CONTROL_MAX_LENGTH (256 bytes), the code path in ux_device_class_dfu_read may copy data into a 256-byte buf...

CVE-2018-17937

gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs...

CVE-2020-36149

Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

com.github.jknack:mwa-solr4 (>=0.3.11, <=0.4.0), org.apache.jackrabbit:oak-solr-embedded (>=0.11, <=0.17.1) +11 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (4.1.0)

org.apache.solr:solr-core MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr4 =0.3.11, =0.11, =0.11, =0.17.1 - org.apache.solr:solr 4.1.0 -...

co.paralleluniverse:comsat-tomcat-loader (>=0.1.0, <=0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (>=8.0.0-rc1, <=8.0.3) +2 more potentially affected by CVE-2014-0095 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.0-rc1, <=8.0.3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.0-rc1, =0.1.0, =8.0.0-rc1, =8.0.1, =1.0.0.cr6, =1.0.0.cr7 Source cves: CVE-2014-0095 Source advisory: OSV:GHSA-WF5V-JHXJ-Q632...

CVE-2022-30013

A stored cross-site scripting XSS vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file...

CVE-2022-30013

A stored cross-site scripting XSS vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file...

CVE-2022-30013: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file...

Das U-Boot security vulnerability

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A security vulnerability exists in Das U-Boot, which stems from nfslookupreply in net/nfs.c having an infinite...

GHSA-XM92-RF24-H74W Apache Geronimo Application Server multiple directory traversal vulnerabilities

Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the 1 group, 2 artifact, 3 version, or 4 fileType...

Apache Geronimo Application Server multiple directory traversal vulnerabilities

Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the 1 group, 2 artifact, 3 version, or 4 fileType...

org.eclipse.jetty:jetty-ajp (7.0.0.m0), org.eclipse.jetty:jetty-annotations (7.0.0.m0) +13 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.m0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty:jetty-ajp 7.0.0.m0 - org.eclipse.jetty:jetty-annotations 7.0.0.m0 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta5), org.wildfly.core:wildfly-embedded (1.0.0.beta5) +6 more potentially affected by CVE-2018-10862 via org.wildfly.core:wildfly-server (1.0.0.beta5)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta5 - org.wildfly.core:wildfly-embedded...