CVE-2023-36177

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API...

CVE-2023-36177

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API...

Code injection

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API...

com.jfinal:jfinal-undertow (3.0), com.lastb7:jfinal-swagger-knife4j (>=2.10.1, <=3.0.0) +2 more potentially affected by CVE-2024-22497 via com.jfinal:jfinal (5.0.0)

com.jfinal:jfinal MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 3.0 - com.lastb7:jfinal-swagger-knife4j =2.10.1, =1.0.4, =3.15.1, =3.15.5 Source cves:...

com.alipay.sofa:sofa-boot-jacoco-report (3.19.1) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.19.1)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.19.1 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.22.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.22.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.22.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.18.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.18.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.18.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.25.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.25.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.25.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.21.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.21.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.21.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.20.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.20.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.20.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.23.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.23.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.23.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.24.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.24.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.24.0 Source cves: CVE-2024-23636 Source...

com.jfinal:jfinal-undertow (3.0), com.lastb7:jfinal-swagger-knife4j (>=2.10.1, <=3.0.0) +2 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (5.0.0)

com.jfinal:jfinal MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 3.0 - com.lastb7:jfinal-swagger-knife4j =2.10.1, =1.0.4, =3.15.1, =3.15.5 Source cves:...

com.jfinal:jfinal-undertow (3.0), com.lastb7:jfinal-swagger-knife4j (>=2.10.1, <=3.0.0) +2 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (5.0.0)

com.jfinal:jfinal MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 3.0 - com.lastb7:jfinal-swagger-knife4j =2.10.1, =1.0.4, =3.15.1, =3.15.5 Source cves:...

CVE-2024-23636

SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while the SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But, prior to version 5.12.0, there i...

Deserialization of untrusted data

SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while the SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But, prior to version 5.12.0, there i...

CVE-2024-23636

SOFARPC (Java RPC framework) is vulnerable prior to version 5.12.0 due to a gadget chain that can bypass the Hessian blacklist used to restrict deserialization of potentially dangerous classes. The vulnerability is rooted in the Hessian-based deserialization thatCAN be manipulated by a gadget cha...

CVE-2024-23636 SOFARPC Remote Command Execution(RCE) Vulnerbility

SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while the SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But, prior to version 5.12.0, there i...

CVE-2024-23636 SOFARPC Remote Command Execution(RCE) Vulnerbility

SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while the SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But, prior to version 5.12.0, there i...

PT-2024-12548

Name of the Vulnerable Software and Affected Versions snapcast versions prior to 0.23.0+dfsg1-1+deb11u1 snapcast versions prior to 0.26.0+dfsg1-1+deb12u1 snapcast version 0.27.0 Description An RCE vulnerability exists in snapcast, a multi-room client-server audio player. Remote attackers can...