com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) +10 more potentially affected by CVE-2024-24549 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m16)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =1.0.0, =1.1.3, =1.1.3, =1.1.3, =1.1.2-snapshots, =1.1.2-snapshots, =1.1.2-snapshots, =11.0.0-m1, =11.0.0-m1, =11.0.0-m16 Source cves: CVE-2024-24549 Source advisory: GHSA-7W75-32CG-R6G2...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m15)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 11.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - com.kfyty:kfyty-boot-starter-tomcat 1.0.0 -...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m15)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 11.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - com.kfyty:kfyty-boot-starter-tomcat 1.0.0 -...

CVE-2024-23910

Cross-site request forgery CSRF vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B a...

CVE-2024-21798

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web...

CVE-2024-25579

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B"...

CVE-2024-23910

Cross-site request forgery CSRF vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B a...

CVE-2024-21798

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.3, <=1.0.4), com.hazelcast:hazelcast-build-utils (3.6.7) +11 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.6.7)

com.hazelcast:hazelcast MAVEN version 3.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.3, =1.4.5, =1.4.6 Source cves:...

de.ikor.sip.foundation:sip-integration-starter (3.2.0), de.ikor.sip.foundation:sip-security (3.2.0) +95 more potentially affected by CVE-2024-22371 via org.apache.camel:camel-core (>=4.0.0, <=4.0.3)

org.apache.camel:camel-core MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.3 and...

org.apache.camel.springboot:camel-sql-starter (3.22.0) potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (3.22.0)

org.apache.camel:camel-sql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-sql and may be impacted: - org.apache.camel.springboot:camel-sql-starter 3.22.0 Source cves: CVE-2024-22369 Source advisory:...

org.apache.camel.springboot:camel-sql-starter (3.22.0) potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (3.22.0)

org.apache.camel:camel-sql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-sql and may be impacted: - org.apache.camel.springboot:camel-sql-starter 3.22.0 Source cves: CVE-2024-22369 Source advisory:...

org.apache.camel.springboot:camel-cassandraql-starter (3.22.0) potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (3.22.0)

org.apache.camel:camel-cassandraql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-cassandraql and may be impacted: - org.apache.camel.springboot:camel-cassandraql-starter 3.22.0 Source cves: CVE-2024-23114...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.5.0, <=3.7.0) +2 more potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (>=4.1.0, <=4.3.0)

org.apache.camel:camel-cassandraql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =4.3.0 Source cves: CVE-2024-23114 Source advisory: OSV:GHSA-M43P-55RF-8C2J...

org.apache.camel.springboot:camel-cassandraql-starter (3.22.0) potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (3.22.0)

org.apache.camel:camel-cassandraql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-cassandraql and may be impacted: - org.apache.camel.springboot:camel-cassandraql-starter 3.22.0 Source cves: CVE-2024-23114...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (>=4.0.0, <=4.0.3), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (>=4.0.0, <=4.0.3) +5 more potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (>=4.0.0, <=4.0.3)

org.apache.camel:camel-cassandraql MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.0.3 Source cves: CVE-2024-23114 Source advisory: GHSA-M43P-55RF-8C2J...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.5.0, <=3.7.0) +2 more potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (>=4.1.0, <=4.3.0)

org.apache.camel:camel-cassandraql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =4.3.0 Source cves: CVE-2024-23114 Source advisory: GHSA-M43P-55RF-8C2J...

org.apache.camel.kafkaconnector:camel-cassandra-sink-kafka-connector (>=4.0.0, <=4.0.3), org.apache.camel.kafkaconnector:camel-cassandra-source-kafka-connector (>=4.0.0, <=4.0.3) +5 more potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (>=4.0.0, <=4.0.3)

org.apache.camel:camel-cassandraql MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.0.3 Source cves: CVE-2024-23114 Source advisory: OSV:GHSA-M43P-55RF-8C2J...

org.apache.camel.quarkus:camel-quarkus-cassandraql (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-cassandraql-deployment (>=3.5.0, <=3.7.0) +2 more potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (>=4.1.0, <=4.3.0)

org.apache.camel:camel-cassandraql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =4.3.0 Source cves: CVE-2024-23114 Source advisory: MEND:CVE-2024-23114...

org.apache.camel.springboot:camel-cassandraql-starter (3.22.0) potentially affected by CVE-2024-23114 via org.apache.camel:camel-cassandraql (3.22.0)

org.apache.camel:camel-cassandraql MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-cassandraql and may be impacted: - org.apache.camel.springboot:camel-cassandraql-starter 3.22.0 Source cves: CVE-2024-23114...