DataEase code-related vulnerabilities

DataEase is a set of Java-based development of open source data visualization and analysis tools to help users quickly analyze data and insight into business trends , so as to achieve business improvement and optimization . DataEase H2.java handles JDBC connection validation with a code injection...

EUVD-2018-12878

Malware in sbrugna...

EUVD-2022-4092

Malicious code in bioql PyPI...

SoK: Automated Vulnerability Repair: Methods, Tools, and Assessments

The increasing complexity of software has led to the steady growth of vulnerabilities. Vulnerability repair investigates how to fix software vulnerabilities. Manual vulnerability repair is labor-intensive and time-consuming because it relies on human experts, highlighting the importance of...

CVE-2018-20318

An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file...

com.graphql-java:graphql-java-servlet (>=4.4.0, <=4.5.0), com.graphql-java:graphql-java-tools (>=4.1.1, <=4.1.2) +9 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (4.2)

com.graphql-java:graphql-java MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =4.4.0, =4.1.1, =3.9.0, =3.9.0, =1.5.0, =1.1.6-2017-09-24t06-21-2...

com.graphql-java:graphql-java-servlet (>=4.6.0, <=4.7.0), com.graphql-java:graphql-java-tools (>=4.2.0, <=4.3.0) +21 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (6.0)

com.graphql-java:graphql-java MAVEN version 6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =4.6.0, =4.2.0, =3.10.0, =3.10.0, =0.3.1, =0.3.1, =0.3.1, =1.5.7,...

com.graphql-java:graphql-java-servlet (>=5.0.0, <=5.0.1), com.graphql-java:graphql-java-tools (>=5.0.0, <=5.2.3) +51 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (8.0)

com.graphql-java:graphql-java MAVEN version 8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =5.0.0, =5.0.0, =4.1.0, =4.1.0, =1.5.18, =1.5.18, =1.5.13, =1.5.1...

com.distelli.graphql:graphql-apigen (5.0.0), com.distelli.graphql:graphql-apigen-deps (5.0.0) +54 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (12.0)

com.graphql-java:graphql-java MAVEN version 12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.distelli.graphql:graphql-apigen 5.0.0 - com.distelli.graphql:graphql-apigen-deps 5.0.0 -...

com.distelli.graphql:graphql-apigen (>=2.2.0, <=2.3.0), com.distelli.graphql:graphql-apigen-deps (>=2.2.0, <=2.3.0) +4 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (2.4.0)

com.graphql-java:graphql-java MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.distelli.graphql:graphql-apigen =2.2.0, =2.2.0, =2.1.1, =3.0.4, =3.0.4, =3.2.0 Source cves:...

com.graphql-java:graphql-java-servlet (>=5.0.0, <=5.0.1), com.graphql-java:graphql-java-tools (>=5.0.0, <=5.2.3) +51 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (8.0)

com.graphql-java:graphql-java MAVEN version 8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =5.0.0, =5.0.0, =4.1.0, =4.1.0, =1.5.18, =1.5.18, =1.5.13, =1.5.1...

com.graphql-java:graphql-java-servlet (>=4.6.0, <=4.7.0), com.graphql-java:graphql-java-tools (>=4.2.0, <=4.3.0) +21 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (6.0)

com.graphql-java:graphql-java MAVEN version 6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =4.6.0, =4.2.0, =3.10.0, =3.10.0, =0.3.1, =0.3.1, =0.3.1, =1.5.7,...

XML External Entity Reference in weixin-java-tools

An issue was discovered in weixin-java-tools. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...

GHSA-H755-H99P-9FFV XML External Entity Reference in weixin-java-tools

An issue was discovered in weixin-java-tools. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...

Stanford CoreNlp code vulnerabilities

Stanford CoreNlp is a suite of open source, natural language analysis tools written in Java by the Stanford Nlp Group team in the United States. Stanford corenlp has a code issue vulnerability that arises from improper design or implementation during code development of a networked system or...

Sas Institute SAS/Intrnet security vulnerabilities

Sas Institute Sas/IntrNet is a suite of Cgi and Java tools from Sas Institute, Inc. It is used to create and deploy Web-enabled reports and applications. A security vulnerability exists in Sas Institute SAS/Intrnet that arises from an improperly designed or implemented code development process fo...

CVE-2019-5312

An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...

CVE-2019-5312

An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...

CVE-2019-5312

An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...

CVE-2019-5312

CVE-2019-5312 affects weixin-java-tools v3.3.0. An XXE vulnerability exists in BaseWxPayResult.getXmlDoc, tied to an incomplete fix for CVE-2018-20318. Public references indicate high/critical impact (NETWORK, no authentication, victim capable of network access) with both CVSS v2 (7.5, PARTIAL co...