ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-48988 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-48988 Source...

CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-42795 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-44487 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-44487 Source...

ai.ylyue:yue-library-base (finchley.sr2.sr1), ai.ylyue:yue-library-data-jdbc (finchley.sr2.sr1) +26 more potentially affected by CVE-2023-42277 via cn.hutool:hutool-core (4.3.1)

cn.hutool:hutool-core MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-core and may be impacted: - ai.ylyue:yue-library-base finchley.sr2.sr1 - ai.ylyue:yue-library-data-jdbc finchley.sr2.sr1 -...

ai.ylyue:yue-library-base (greenwich.sr1.2), ai.ylyue:yue-library-data-jdbc (greenwich.sr1.2) +23 more potentially affected by CVE-2023-33695 via cn.hutool:hutool-core (4.5.16)

cn.hutool:hutool-core MAVEN version 4.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-core and may be impacted: - ai.ylyue:yue-library-base greenwich.sr1.2 - ai.ylyue:yue-library-data-jdbc greenwich.sr1.2 -...

CVE-2022-31472

Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet...

ai.ylyue:yue-library-auth-client (2.1.0), ai.ylyue:yue-library-auth-service (2.1.0) +369 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.1.11.release)

org.springframework:spring-web MAVEN version 5.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.ylyue:yue-library-auth-client 2.1.0 - ai.ylyue:yue-library-auth-service 2.1.0 -...

ai.ylyue:yue-library-auth-client (>=j8.2.3.3, <=j11.2.3.3), ai.ylyue:yue-library-auth-service (>=j8.2.3.3, <=j11.2.3.3) +418 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.2.14.release)

org.springframework:spring-web MAVEN version 5.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.ylyue:yue-library-auth-client =j8.2.3.3, =j8.2.3.3, =j8.2.3.3, =j8.2.3.3, =j8.2.3.3,...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3974 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.54)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2020-11996 Source...

CVE-2021-43820

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...

CVE-2021-43820

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...

CVE-2021-43820

The CVE-2021-43820 entries describe a permissions-check bypass in Seafile: the in-memory sync token cache does not verify library association in the request URL, allowing a token to access data from any known library if the attacker discovers a library ID. Affected product: Seafile (Seaf-server t...

PT-2021-23956

Name of the Vulnerable Software and Affected Versions: Seafile affected versions not specified Description: The issue affects Seafile, an open source cloud storage system, where a sync token is used to authorize access to library data. The token is cached in memory to improve performance, but the...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4028 more potentially affected by CVE-2021-24122 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.59)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2021-24122 Source...

ai.hyacinth.framework:core-service-discovery-server (>=0.5.0, <=0.5.24), ai.lum:odinson-rest-api_2.12 (>=0.3.1, <=0.5.0) +4009 more potentially affected by CVE-2020-28491 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.8.0.rc1, <=2.11.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.8.0.rc1, =0.5.0, =0.3.1, =j8.2.2.0, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =0.1.2, =0.1.2, =0.2.5 and more Source cves: CVE-2020-28491 Source advisory: MEND:CVE-2020-2849...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4542 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2020-1938 Source advisory: GHSA-C9HW-WF7X-JP9J...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4520 more potentially affected by CVE-2019-12418 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.47)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2019-12418 Source advisory: GHSA-HH3J-X4MC-G48R...

ai.ylyue:yue-library-auth-service (>=j8.2.2.0, <=2.1.0), ai.ylyue:yue-library-data-redis (>=finchley.sr4, <=greenwich.sr2.1) +3422 more potentially affected by CVE-2018-1000613 via org.bouncycastle:bcprov-jdk15on (>=1.57, <=1.59)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.57, =j8.2.2.0, =finchley.sr4, =1.1.1.release, =1.1.1.release, =2.0.8, =2.0.8, =2.0.8, =2.4, =0.6.0, =1.0.7, =0.5.0, =0.1.0, =1.0.0, =3.0.3 and more Source cves: CVE-2018-1000613 Source advisory: GHSA-4446-656P-F54G...

Atlassian Fisheye and Crucible Information Disclosure Vulnerability (CNVD-2018-05564)

Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A security vulnerability exists in the /rest/review-coverage-chart/1.0/data/.json resourc...