de.wicketbuch.extensions:appendablerepeater (>=1.2.5.wicket5, <=1.4.1.wicket5), de.wicketbuch.extensions:appendablerepeater-examples (>=1.2.5.wicket5, <=1.4.1.wicket5) +12 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.14)

org.apache.wicket:wicket-core MAVEN version 1.5.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - de.wicketbuch.extensions:appendablerepeater =1.2.5.wicket5, =1.2.5.wicket5, =1.4.1.wicket5 -...

de.wicketbuch.extensions:extensible-autolinking (1.1.1.wicket5), de.wicketbuch.extensions:extensible-autolinking-examples (1.1.1.wicket5) +13 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.15)

org.apache.wicket:wicket-core MAVEN version 1.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - de.wicketbuch.extensions:extensible-autolinking 1.1.1.wicket5 -...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +4 more potentially affected by CVE-2022-29214 via next-auth (>=0.0.0-manual.83c4ebd1, <=3.1.0)

next-auth NPM version =0.0.0-manual.83c4ebd1, =0.5.1, =0.57.0, =0.35.0, =1.1.0, =0.0.1, =0.0.5 Source cves: CVE-2022-29214 Source advisory: MEND:CVE-2022-29214...

org.drools:drools-camel-server (>=5.3.1.final, <=5.4.0.beta2), org.drools:drools-simulator (5.4.0.beta2) +3 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.2.0.final)

org.jbpm:jbpm-bpmn2 MAVEN version 5.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.drools:drools-camel-server =5.3.1.final, =5.3.1.final, =5.4.0.beta2 Source cves: CVE-2014-8125 Source advisory:...

org.drools:drools-camel-server (5.3.5.final), org.jbpm:jbpm-distribution (5.2.5.final) +3 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.2.5.final)

org.jbpm:jbpm-bpmn2 MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.drools:drools-camel-server 5.3.5.final - org.jbpm:jbpm-distribution 5.2.5.final - org.jbpm:jbpm-examples...

org.jbpm:jbpm-distribution (5.3.0.cr1), org.jbpm:jbpm-examples (5.3.0.cr1) +1 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.3.0.cr1)

org.jbpm:jbpm-bpmn2 MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.jbpm:jbpm-distribution 5.3.0.cr1 - org.jbpm:jbpm-examples 5.3.0.cr1 - org.jbpm:jbpm-test 5.3.0.cr1 Source cves:...

com.google.cloud:gcloud-java-examples (>=0.2.5, <=0.2.8), com.google.cloud:gcloud-java-nio-examples (>=0.2.5, <=0.2.8) +4 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.cloud:gcloud-java-examples =0.2.5, =0.2.5, =0.3.0, =0.3.0, =0.13.0-alpha -...

Stripe: Tomcat Servlet Examples accessible at https://44.240.33.83:38443 and https://52.36.56.155:38443

Tomcat Servlet Examples were accessible from the internet. This report demonstrated that it was possible to disclose IP addresses of internal application servers...

Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...

GHSA-G77G-VJJM-X83J Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...

Apache Tomcat XSS Vulnerabilities in Examples Web Application

Multiple cross-site scripting XSS vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via...

GHSA-HC39-RJWP-QFFQ Apache Tomcat XSS Vulnerabilities in Examples Web Application

Multiple cross-site scripting XSS vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via...

GHSA-5HGM-QM5M-5VMW Jakarta Tomcat cross-site scripting (XSS) vulnerability

Multiple cross-site scripting XSS vulnerabilities in the 1 examples and 2 ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML...

Undetectable Backdoors in Machine-Learning Models

New paper: "Planting Undetectable Backdoors in Machine Learning Models": Abstract: Given the computational cost and technical expertise required to train machine learning models, users may delegate the task of learning to a service provider. We show how a malicious learner can plant an undetectab...

WordPress Popup Maker 1.16.5 Plugin - Stored Cross-Site Scripting (Authenticated) Vulnerability

Exploit Title: WordPress Plugin Popup Maker Popup Settings Triggers Add New Cookie Add Cookie Time overwrite the default '1 month' with XSS payload Click 'Add' what triggers the XSS payload Payload examples: alert'XSS';...

[SECURITY] Fedora 36 Update: osgearth-3.2-7.fc36

osgEarth is a C++ terrain rendering SDK. Just create a simple XML file, point it at your imagery, elevation, and vector data, load it into your favorite OpenSceneGraph application, and go! osgEarth supports all kinds of data and comes with lots of examples to help you get up and running quickly a...

dbnd-examples (>=0.50.1, <=0.56.7), earnest-airflow-plugin (>=0.0.1, <=0.0.2b1) +1 more potentially affected by CVE-2022-24288 via apache-airflow (1.10.10)

apache-airflow PYPI version 1.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dbnd-examples =0.50.1, =0.0.1, =10.3.0rc1, =10.3.0rc2 Source cves: CVE-2022-24288 Source advisory: OSV:PYSEC-2022-30...

com.datastax.cassandra:cassandra-driver-core (>=1.0.0-beta2, <=1.0.1), com.datastax.cassandra:cassandra-driver-examples-parent (>=1.0.0-beta2, <=1.0.1) +4 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.2.3)

org.apache.cassandra:cassandra-all MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.datastax.cassandra:cassandra-driver-core =1.0.0-beta2, =1.0.0-beta2, =1.0.0-beta2,...

Mageia: Security Advisory (MGASA-2018-0220)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.javasimon:javasimon-examples (>=2.0, <=2.1) potentially affected by CVE-2022-23221 via com.h2database:h2 (1.1.111)

com.h2database:h2 MAVEN version 1.1.111 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - org.javasimon:javasimon-examples =2.0, =2.1 Source cves: CVE-2022-23221 Source advisory: OSV:GHSA-45HX-WFHJ-473X...