7177 matches found
GHSA-VX85-MJ8C-4QM6 vulnerabilities
Vulnerabilities for packages: druid, trino...
GHSA-9MXF-G3X6-WV74 vulnerabilities
Vulnerabilities for packages: hive...
@1337lawyers/design (>=0.1.0, <=0.1.38), @9188/w-cli (>=1.0.0, <=1.0.4) +50 more potentially affected by CVE-2018-6342 via react-dev-utils (>=5.0.0, <=5.0.1)
react-dev-utils NPM version =5.0.0, =0.1.0, =1.0.0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.5, =1.0.0-beta.28, =1.0.1, =1.0.0, =1.0.0, =0.26.4, =0.0.0-legacy, =3.10.0-beta.0, =0.1.0-alpha.0, =2.1.16, =2.3.5 - aqxy-common-ui 0.0.1 and more Source cves: CVE-2018-6342 Source advisory:...
org.eclipse.jetty.aggregate:jetty-all (7.1.0.v20100505), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.v20100505) +34 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.1.0.v20100505)
org.eclipse.jetty:jetty-server MAVEN version 7.1.0.v20100505 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.v20100505 -...
org.apache.asterix:asterix-app (0.8.8-incubating), org.apache.clerezza:platform.launcher.storageless (0.8-incubating) +80 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (8.0.0.m2)
org.eclipse.jetty:jetty-server MAVEN version 8.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.asterix:asterix-app 0.8.8-incubating -...
co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)
org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...
com.jolira:testing-tools (1.2.5), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2.1) +155 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.2.1.v20101111)
org.eclipse.jetty:jetty-server MAVEN version 7.2.1.v20101111 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira:testing-tools 1.2.5 - org.apache.geronimo.assemblies:geronimo-jetty7-javaee5...
biz.neustar:browsermob-proxy (>=2.0-beta-3, <=2.0-beta-7), com.ardoq:java-api-client (0.9.6) +54 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.3.0.v20110203)
org.eclipse.jetty:jetty-server MAVEN version 7.3.0.v20110203 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - biz.neustar:browsermob-proxy =2.0-beta-3, =0.0.1, =1.0.0-beta, =2.0-beta-8, =2.1.0-beta-1...
com.adaptrex:adaptrex-server (0.1.1), com.hmsonline:dropwizard-spring (>=0.1.1, <=0.1.2) +83 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (8.1.4.v20120524)
org.eclipse.jetty:jetty-server MAVEN version 8.1.4.v20120524 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.adaptrex:adaptrex-server 0.1.1 - com.hmsonline:dropwizard-spring =0.1.1, =0.20.0,...
com.github.stephenc.jetties:jetty-deb (8.1.6), com.github.stephenc.jetties:jetty-rpm (8.1.6) +50 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (8.1.6.v20120903)
org.eclipse.jetty:jetty-server MAVEN version 8.1.6.v20120903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.stephenc.jetties:jetty-deb 8.1.6 - com.github.stephenc.jetties:jetty-rpm 8.1.6...
edu.cmu.lti.oaqa.bio.core:baseqa (1.10.3), edu.cmu.lti.oaqa.cse:cse-framework (2.3.3) +63 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.1.v20091125)
org.eclipse.jetty:jetty-server MAVEN version 7.0.1.v20091125 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - edu.cmu.lti.oaqa.bio.core:baseqa 1.10.3 - edu.cmu.lti.oaqa.cse:cse-framework 2.3.3 -...
com.pacificwebconsulting.core:core-microservice (>=2.0.0, <=3.0.10), com.pacificwebconsulting.runner:runner-microservice (>=1.0.0, <=1.0.2) +64 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.2.0.v20101020)
org.eclipse.jetty:jetty-server MAVEN version 7.2.0.v20101020 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.pacificwebconsulting.core:core-microservice =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.6,...
org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc2) +43 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.5.0.rc2)
org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...
com.github.rest-driver:rest-client-driver (>=1.1.20, <=1.1.30), com.groupdocs:groupdocs-java-client (1.1) +65 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.0.v20120127)
org.eclipse.jetty:jetty-server MAVEN version 8.1.0.v20120127 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.rest-driver:rest-client-driver =1.1.20, =1.0.9, =1.0.10 -...
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Withdrawn: Duplicate of CVE-2017-12161 / GHSA-959q-32g8-vvp7...
Arbitrary JavaScript Execution
Overview A vulnerability exists in bassmaster = 1.5.1 that allows for an attacker to provide arbitrary JavaScript that is then executed server side via eval. Recommendation Update to bassmaster version 1.5.2 or greater. References - Commit b751602 - GitHub Advisory...
