Measuresoft ScadaPro Server ORM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Measuresoft ScadaPro Server ORM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Measuresoft ScadaPro Server ORM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2021-22137 Source advisory:...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2020-7021 Source advisory:...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2020-7019 Source advisory:...

org.springframework:spring-hibernate (1.2.3), org.springframework:spring-mock (1.2.3) +3 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (1.2.3)

org.springframework:spring-web MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-mock 1.2.3 -...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-mock (1.2.4) +3 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (1.2.4)

org.springframework:spring-web MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-mock 1.2.4 -...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-mock (1.2.2) +3 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (1.2.2)

org.springframework:spring-web MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-mock 1.2.2 -...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2019-7614 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2019-7614 Source advisory:...

GHSA-PW5C-XQF2-6XC2 Doctrine Security Misconfiguration Vulnerability

Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2018-3824 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2018-3824 Source advisory:...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2019-7611 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2019-7611 Source advisory:...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-mock (1.2.2) +3 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (1.2.2)

org.springframework:spring-web MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-mock 1.2.2 -...

org.springframework:spring-hibernate (1.2.1), org.springframework:spring-mock (1.2.1) +3 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (1.2.1)

org.springframework:spring-web MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.1 - org.springframework:spring-mock 1.2.1 -...

org.springframework:spring-hibernate (1.2.3), org.springframework:spring-mock (1.2.3) +3 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (1.2.3)

org.springframework:spring-web MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-mock 1.2.3 -...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-mock (1.2.4) +3 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (1.2.4)

org.springframework:spring-web MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-mock 1.2.4 -...

org.springframework:spring-hibernate (1.2.3), org.springframework:spring-orm (1.2.3) +1 more potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (1.2.3)

org.springframework:spring-webmvc MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-orm 1.2.3 -...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-orm (1.2.4) +1 more potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (1.2.4)

org.springframework:spring-webmvc MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-orm 1.2.4 -...

org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +6 more potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (1.2.5)

org.springframework:spring-webmvc MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...