cn.smilevers:xxljob-spring-boot-starter (1.8.2-release) potentially affected by CVE-2024-3366 via com.xuxueli:xxl-job-core (1.8.2)

com.xuxueli:xxl-job-core MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release Source cves: CVE-2024-3366 Source advisory:...

CVE-2024-25568

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.4), org.bonitasoft.engine:bonita-engine-standalone (7.11.4) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.11.4)

org.bonitasoft.platform:platform-resources MAVEN version 7.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.4 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.12.1), org.bonitasoft.engine:bonita-engine-standalone (7.12.1) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.12.1)

org.bonitasoft.platform:platform-resources MAVEN version 7.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.12.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.3), org.bonitasoft.engine:bonita-engine-standalone (7.9.3) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.9.3)

org.bonitasoft.platform:platform-resources MAVEN version 7.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.3), org.bonitasoft.engine:bonita-engine-standalone (7.11.3) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.11.3)

org.bonitasoft.platform:platform-resources MAVEN version 7.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (>=10.0.0, <=10.1.0)

org.bonitasoft.platform:platform-resources MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-27609 Source advisory: OSV:GHSA-8VJ9-5V5Q-FHCH...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (>=10.0.0, <=10.1.0)

org.bonitasoft.platform:platform-resources MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-27609 Source advisory: GHSA-8VJ9-5V5Q-FHCH...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.1), org.bonitasoft.engine:bonita-engine-standalone (7.10.1) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.10.1)

org.bonitasoft.platform:platform-resources MAVEN version 7.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (8.0.0), org.bonitasoft.engine:bonita-engine-standalone (8.0.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (8.0.0)

org.bonitasoft.platform:platform-resources MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 8.0.0 -...

org.bonitasoft.connectors:bonita-connector-rest (>=1.4.0, <=1.5.1), org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.14.0) +3 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.14.0)

org.bonitasoft.platform:platform-resources MAVEN version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.connectors:bonita-connector-rest =1.4.0, =1.5.1 -...

CVE-2023-34370 Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...

CVE-2023-34370 Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...

CVE-2023-34370: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...

PT-2024-12475 · Elementor +2 · Elementor +3

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates versions 3.2.4 and earlier Brainstorm Force Premium Starter Templates versions 3.2.4 and earlier Description: A Server-Side Request Forgery SSRF issue affect...

com.labijie.infra:oauth2-authorization-server-starter (>=1.2.0, <=1.2.5) potentially affected by CVE-2024-22258 via org.springframework.security:spring-security-oauth2-authorization-server (0.2.1)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-authorization-server and may be impacted: -...

cn.herodotus.engine:oauth2-sdk-authorization (>=2.7.0.20, <=2.7.0.50), cn.herodotus.engine:oauth2-sdk-authorization-server (>=2.7.0.20, <=2.7.0.50) +3 more potentially affected by CVE-2024-22258 via org.springframework.security:spring-security-oauth2-authorization-server (0.3.0)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-authorization-server and may be impacted: -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), com.apigee.edge.config:apigee-config-maven-plugin (>=1.3, <=2.2.2) +337 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.3.20.release)

org.springframework:spring-web MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 -...

cn.aradin:aradin-cluster-zookeeper-starter (>=1.1.1, <=1.1.2), cn.aradin:aradin-lucene-solr-starter (>=1.1.1, <=1.1.2) +526 more potentially affected by CVE-2024-23944 via org.apache.zookeeper:zookeeper (>=3.9.0, <=3.9.1)

org.apache.zookeeper:zookeeper MAVEN version =3.9.0, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =2.1.1, =15.1-release, =15.0-release, =2.03-release, =3.3.0.4.0.6, =3.3.0.4.0.5, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.10 and more Source cves: CVE-2024-23944 Source advisory:...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m15)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 11.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - com.kfyty:kfyty-boot-starter-tomcat 1.0.0 -...