1770 matches found
net.encomendaz:encomendaz-services-client (>=1.0.0, <=1.0.2), org.apache.isis.viewer:isis-viewer-restfulobjects-applib (1.0.0) +24 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (2.3.1.ga)
org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - net.encomendaz:encomendaz-services-client =1.0.0, =1.0.2 -...
org.jboss.resteasy:abdera-atom-provider (1.2.rc1), org.jboss.resteasy:async-http-servlet-3.0 (1.2.rc1) +7 more potentially affected by CVE-2014-7839 via org.jboss.resteasy:resteasy-jaxrs (1.2.rc1)
org.jboss.resteasy:resteasy-jaxrs MAVEN version 1.2.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 1.2.rc1 - org.jboss.resteasy:async-http-servlet-3.0...
at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6345 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)
org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6345 Source advisory: OSV:GHSA-VXHJ-3X7P-JXP5...
org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6345 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)
org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6345 Source advisory: GHSA-VXHJ-3X7P-JXP5...
org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6345 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)
org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6345 Source advisory: OSV:GHSA-VXHJ-3X7P-JXP5...
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs...
GHSA-VXHJ-3X7P-JXP5 Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs...
GHSA-9XFC-J5MF-9W5P JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack
JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack...
at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6348 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)
org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6348 Source advisory: OSV:GHSA-9XFC-J5MF-9W5P...
JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack
JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion XSSI attack...
org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6347 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)
org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6347 Source advisory: OSV:GHSA-R346-RMRG-QPGH...
GHSA-R346-RMRG-QPGH Improper Neutralization of Input During Web Page Generation in RESTEasy
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6347 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)
org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6347 Source advisory: GHSA-R346-RMRG-QPGH...
Improper Neutralization of Input During Web Page Generation in RESTEasy
Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6347 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)
org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6347 Source advisory: OSV:GHSA-R346-RMRG-QPGH...
com.redhat.rhevm.api:rhevm-api (>=0.1-milestone, <=1.0-rc1.21), com.redhat.rhevm.api:rhevm-api-cli-actions (>=0.9-milestone1, <=0.9-milestone6.6) +43 more potentially affected by CVE-2011-5245 via org.jboss.resteasy:resteasy-jaxb-provider (>=2.0-beta-1, <=2.3.1.ga)
org.jboss.resteasy:resteasy-jaxb-provider MAVEN version =2.0-beta-1, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1,...
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding JAXB input, aka an XML external entity XXE injection attack, a similar vulnerability to...
com.redhat.rhevm.api:rhevm-api (>=0.1-milestone, <=1.0-rc1.21), com.redhat.rhevm.api:rhevm-api-cli-actions (>=0.9-milestone1, <=0.9-milestone6.6) +43 more potentially affected by CVE-2011-5245 via org.jboss.resteasy:resteasy-jaxb-provider (>=2.0-beta-1, <=2.3.1.ga)
org.jboss.resteasy:resteasy-jaxb-provider MAVEN version =2.0-beta-1, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1,...
org.jboss.resteasy:resteasy-atom-provider (1.2.ga), org.jboss.resteasy:resteasy-fastinfoset-provider (1.2.ga) +2 more potentially affected by CVE-2011-5245 via org.jboss.resteasy:resteasy-jaxb-provider (1.2.ga)
org.jboss.resteasy:resteasy-jaxb-provider MAVEN version 1.2.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxb-provider and may be impacted: - org.jboss.resteasy:resteasy-atom-provider 1.2.ga -...
org.jboss.resteasy:resteasy-atom-provider (1.2.1.ga), org.jboss.resteasy:resteasy-fastinfoset-provider (1.2.1.ga) +2 more potentially affected by CVE-2011-5245 via org.jboss.resteasy:resteasy-jaxb-provider (1.2.1.ga)
org.jboss.resteasy:resteasy-jaxb-provider MAVEN version 1.2.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxb-provider and may be impacted: - org.jboss.resteasy:resteasy-atom-provider 1.2.1.ga -...