com.arcadeanalytics:arcadeanalytics (>=1.0.2, <=1.0.8), com.deere.isg.work-tracker.examples:spring-boot-example (>=1.0.0-rc4, <=1.0.0-rc14) +37 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.15.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.arcadeanalytics:arcadeanalytics =1.0.2, =1.0.0-rc4...

africa.absa:inception-application (>=1.0.0, <=1.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +1215 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-webflux (>=2.0.0.release, <=2.5.11)

org.springframework.boot:spring-boot-starter-webflux MAVEN version =2.0.0.release, =1.0.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =2.1.2.release, =1.3, =0.5.0, =3.1.37, =3.1.13, =3.1.85, =3.1.13, =3.1.13, =3.1.295 - ch.mobi.mobitor:mobitor-doc 3.1.13 and more Source cves: CVE-2022-22965 Source...

africa.absa:inception-application (>=1.0.0, <=1.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +1215 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-webflux (>=2.0.0.release, <=2.5.11)

org.springframework.boot:spring-boot-starter-webflux MAVEN version =2.0.0.release, =1.0.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =2.1.2.release, =1.3, =0.5.0, =3.1.37, =3.1.13, =3.1.85, =3.1.13, =3.1.13, =3.1.295 - ch.mobi.mobitor:mobitor-doc 3.1.13 and more Source cves: CVE-2022-22965 Source...

org.springframework.boot:spring-boot-starter-data-rest (1.0.0.release), org.springframework.boot:spring-boot-starter-mobile (1.0.0.release) +2 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.0.0.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

com.github.totyumengr:minicubes-cluster (0.2), com.kurento.kmf:kmf-broker (4.3.1) +30 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.4.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.github.totyumengr:minicubes-cluster 0.2 -...

com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3), com.github.pjagielski.spring-boot-swagger:spring-boot-swagger (0.1) +11 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.0.2.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.blitline:blitline-image-client-example =0.10.1,...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0-rc1, <=0.2.1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0-rc1, <=0.2.1) +4 more potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (0.2.1-rc1)

com.alibaba.nacos:nacos-common MAVEN version 0.2.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc...

com.alibaba.nacos:nacos-client (0.9.0), org.nutz:nutzboot-starter-nacos-config-client (>=2.3.1.v20190318, <=2.3.7.v20190731) potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (0.9.0)

com.alibaba.nacos:nacos-common MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client 0.9.0 - org.nutz:nutzboot-starter-nacos-config-client...

cc.uncarbon.framework:helio-starter-cloud (>=1.2.1, <=1.3.0), com.alibaba.nacos:nacos-client (>=2.0.0-alpha.1, <=2.0.0-beta) potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (>=2.0.0-alpha.1, <=2.0.0-beta)

com.alibaba.nacos:nacos-common MAVEN version =2.0.0-alpha.1, =1.2.1, =2.0.0-alpha.1, =2.0.0-beta Source cves: CVE-2021-44667 Source advisory: OSV:GHSA-4GR7-QW2Q-JXH6...

cc.uncarbon.framework:helio-starter-cloud (>=1.2.1, <=1.3.0), com.alibaba.nacos:nacos-client (>=2.0.0-alpha.1, <=2.0.0-beta) potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (>=2.0.0-alpha.1, <=2.0.0-beta)

com.alibaba.nacos:nacos-common MAVEN version =2.0.0-alpha.1, =1.2.1, =2.0.0-alpha.1, =2.0.0-beta Source cves: CVE-2021-44667 Source advisory: MEND:CVE-2021-44667...

WordPress WordPress Everse Starter Sites – Elementor Templates plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Everse Starter Sites – Elementor Templates plugin versions = 1.1. Solution Update the WordPress WordPress Everse Starter Sites – Elementor Templates plugin to the latest available version at...

WordPress WordPress Everse Starter Sites – Elementor Templates plugin <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Everse Starter Sites – Elementor Templates plugin versions = 1.1. Solution Update the WordPress WordPress Everse Starter Sites – Elementor Templates plugin to the latest available version at least 1.2.1...

WordPress GloriousThemes Starter Sites plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress GloriousThemes Starter Sites plugin versions = 1.0.1. Solution No patched version available...

WordPress GloriousThemes Starter Sites plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress GloriousThemes Starter Sites plugin versions = 1.0.1. Solution No patched version available...

com.github.seaframework:sea-core-basic (1.0.0), com.github.seaframework:sea-monitor (>=1.0.0, <=1.3.1) +5 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.5.17)

cn.hutool:hutool-http MAVEN version 4.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - com.github.seaframework:sea-core-basic 1.0.0 - com.github.seaframework:sea-monitor =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

org.apache.camel:camel-infinispan (3.0.0-m1), org.apache.camel:camel-infinispan-starter (3.0.0-m2) +75 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (9.4.6.final)

org.infinispan:infinispan-core MAVEN version 9.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.apache.camel:camel-infinispan 3.0.0-m1 - org.apache.camel:camel-infinispan-starter 3.0.0-...

org.apache.camel:camel-infinispan-starter (3.0.0-m1), org.infinispan.server:infinispan-server-event-logger (9.4.5.final) +63 more potentially affected by CVE-2020-25711 via org.infinispan:infinispan-core (9.4.5.final)

org.infinispan:infinispan-core MAVEN version 9.4.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.apache.camel:camel-infinispan-starter 3.0.0-m1 -...

cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: GHSA-V98J-7CRC-WVRJ...

cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: OSV:GHSA-V98J-7CRC-WVRJ...