Cesanta MJS has an unspecified vulnerability (CNVD-2022-77012)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...

Cesanta MJS has an unspecified vulnerability (CNVD-2022-77013)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...

info.archinnov:achilles-embedded (3.0.7), info.archinnov:achilles-junit (3.0.7) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.10)

org.apache.cassandra:cassandra-all MAVEN version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded 3.0.7 - info.archinnov:achilles-junit 3.0.7 Source cves:...

com.facebook.presto:presto-cassandra (>=0.146, <=0.166), com.stratio.cassandra:cassandra-lucene-index-plugin (2.1.6.2) +5 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.1.6)

org.apache.cassandra:cassandra-all MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.facebook.presto:presto-cassandra =0.146, =0.1.0.final, =0.1.0.final, =0.4.0.final,...

info.archinnov:achilles-embedded (>=3.0.18, <=3.0.19), info.archinnov:achilles-junit (>=3.0.18, <=3.0.19) +1 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.13)

org.apache.cassandra:cassandra-all MAVEN version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded =3.0.18, =3.0.18, =3.0.18, =3.0.19 Source cves:...

com.tuplejump:stargate-core (0.9.9), info.archinnov:achilles-embedded (>=3.0.8, <=3.0.16) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.11)

org.apache.cassandra:cassandra-all MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.tuplejump:stargate-core 0.9.9 - info.archinnov:achilles-embedded =3.0.8, =3.0.8, =3.0....

info.archinnov:achilles-embedded (>=3.0.20, <=3.0.22), info.archinnov:achilles-junit (>=3.0.20, <=3.0.22) +1 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.15)

org.apache.cassandra:cassandra-all MAVEN version 2.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded =3.0.20, =3.0.20, =3.0.20, =3.0.22 Source cves:...

info.archinnov:achilles-embedded (3.0.2), info.archinnov:achilles-junit (3.0.2) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.6)

org.apache.cassandra:cassandra-all MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded 3.0.2 - info.archinnov:achilles-junit 3.0.2 -...

CVE-2022-23806

Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element...

GHSA-836G-5FR5-FGCR Missing Authentication for Critical Function in Apache TomEE

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 -...

CVE-2021-0060

Insufficient compartmentalization in HECI subsystem for the IntelR SPS before versions SPSE504.01.04.516.0, SPSE504.04.04.033.0, SPSE504.04.03.281.0, SPSE503.01.03.116.0, SPSE305.01.04.309.0, SPS02.04.00.101.0, SPSSoC-A05.00.03.114.0, SPSSoC-X04.00.04.326.0, SPSSoC-X03.00.03.117.0,...

org.infinispan:infinispan-as-embedded-modules (7.1.0.cr2), org.infinispan:infinispan-cachestore-jdbc (7.1.0.cr2) +26 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (7.1.0.cr2)

org.infinispan:infinispan-core MAVEN version 7.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.1.0.cr2 -...

org.infinispan:infinispan-as-embedded-modules (7.1.0.beta1), org.infinispan:infinispan-cachestore-jdbc (7.1.0.beta1) +26 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (7.1.0.beta1)

org.infinispan:infinispan-core MAVEN version 7.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.1.0.beta1 -...

org.infinispan.server:infinispan-server-feature-pack (8.1.0.alpha1), org.infinispan.server:infinispan-server-infinispan (8.1.0.alpha1) +31 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (8.1.0.alpha1)

org.infinispan:infinispan-core MAVEN version 8.1.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.0.alpha1 -...

org.infinispan:infinispan-as-embedded-modules (8.0.0.alpha2), org.infinispan:infinispan-atomic-factory (8.0.0.alpha2) +29 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (8.0.0.alpha2)

org.infinispan:infinispan-core MAVEN version 8.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-embedded-modules 8.0.0.alpha2 -...

org.infinispan.server:infinispan-server-feature-pack (8.1.8.final), org.infinispan.server:infinispan-server-infinispan (8.1.8.final) +35 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (8.1.8.final)

org.infinispan:infinispan-core MAVEN version 8.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.8.final -...

org.hibernate.ogm:hibernate-ogm-infinispan-embedded (>=5.3.0.final, <=5.3.1.final), org.infinispan.server:infinispan-server-event-logger (9.1.6.final) +57 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (9.1.6.final)

org.infinispan:infinispan-core MAVEN version 9.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate.ogm:hibernate-ogm-infinispan-embedded =5.3.0.final, =5.3.1.final -...

org.infinispan:infinispan-as-embedded-modules (7.2.0.cr1), org.infinispan:infinispan-atomic-factory (7.2.0.cr1) +29 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (7.2.0.cr1)

org.infinispan:infinispan-core MAVEN version 7.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.2.0.cr1 -...

com.geeoz.atom:atom-api_2.11 (>=0.1.0, <=0.3.0), com.geeoz.atom:atom-kie_2.11 (>=0.1.0, <=0.3.0) +54 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (7.2.0.final)

org.infinispan:infinispan-core MAVEN version 7.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.geeoz.atom:atom-api2.11 =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.9.0,...

org.infinispan:infinispan-as-embedded-modules (7.1.0.cr1), org.infinispan:infinispan-cachestore-jdbc (7.1.0.cr1) +26 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (7.1.0.cr1)

org.infinispan:infinispan-core MAVEN version 7.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.1.0.cr1 -...