cn.centychen:xxl-job-spring-boot-starter (>=1.0.0-release, <=1.0.1-release), cn.db101:xxl-job-spring-boot-starter (1.1.0) +53 more potentially affected by CVE-2020-29204 via com.xuxueli:xxl-job-core (>=1.8.2, <=2.2.0)

com.xuxueli:xxl-job-core MAVEN version =1.8.2, =1.0.0-release, =0.0.8-release, =0.0.8-release, =1.6.0, =1.0.1, =2.1.1-release, =6.1.0, =0.0.4, =1.5.13, =1.7.1 - com.gitee.zodiacstack:zodiac-xxljob-spring-boot-starter 1.5.16 - com.github.hiwepy:xxljob-spring-boot-starter 1.0.0.release -...

Multiple Siemens products have vulnerabilities in input validation.

Siemens SENTRON PAC3200 is a multifunctional power meter for industrial environments.Siemens SENTRON PAC4200 is a multifunctional power meter for industrial environments.Siemens SENTRON PAC4200 is a multifunctional power meter for industrial environments.Siemens SIRIUS 3RW5 is a soft start device...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=0.0.41) +87 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (>=9.0.0, <=9.1.2)

com.cronutils:cron-utils MAVEN version =9.0.0, =0.0.2, =0.0.21, =0.0.1, =0.1.2, =0.0.1, =1.2.19, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2020-26238 Source advisory: OSV:GHSA-PFJ3-56HM-JWQ5...

org.hswebframework:hsweb-task-cluster (1.0.0-rc), org.hswebframework:hsweb-task-core (1.0.0-rc) +1 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (7.0.5)

com.cronutils:cron-utils MAVEN version 7.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - org.hswebframework:hsweb-task-cluster 1.0.0-rc - org.hswebframework:hsweb-task-core 1.0.0-rc -...

Authentication Bypass

shiro-spring-boot-web-starter is vulnerable to authentication bypass. An attacker is able to bypass authentication via a malicious HTTP request...

CVE-2020-14022

Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts "Import Contacts" functionality from a file. It is possible to upload an executable or .bat file that can be executed with the help of a functionality E.g. the "Application Starter" module...

Design/Logic Flaw

Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts "Import Contacts" functionality from a file. It is possible to upload an executable or .bat file that can be executed with the help of a functionality E.g. the "Application Starter" module...

PT-2020-13846

Name of the Vulnerable Software and Affected Versions Ozeki NG SMS Gateway versions 4.17.1 through 4.17.6 Description The issue concerns the "Import Contacts" functionality, which does not check the file type when bulk importing new contacts from a file. This allows an attacker to upload an...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (3.0.3-rc), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (3.0.3-rc) +270 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (9.0.0-m5)

org.apache.wicket:wicket-core MAVEN version 9.0.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context 3.0.3-rc -...

org.apache.camel.kafkaconnector:camel-robotframework-kafka-connector (>=0.1.0, <=0.3.0), org.apache.camel.springboot:camel-robotframework-starter (>=3.0.0, <=3.3.0) +1 more potentially affected by CVE-2020-11994 via org.apache.camel:camel-robotframework (>=3.0.0-rc2, <=3.3.0)

org.apache.camel:camel-robotframework MAVEN version =3.0.0-rc2, =0.1.0, =3.0.0, =3.0.0-rc2, =3.0.0-rc3 Source cves: CVE-2020-11994 Source advisory: OSV:GHSA-9VFJ-5G7H-4P24...

org.apache.camel.kafkaconnector:camel-robotframework-kafka-connector (>=0.1.0, <=0.3.0), org.apache.camel.springboot:camel-robotframework-starter (>=3.0.0, <=3.3.0) +1 more potentially affected by CVE-2020-11994 via org.apache.camel:camel-robotframework (>=3.0.0-rc2, <=3.3.0)

org.apache.camel:camel-robotframework MAVEN version =3.0.0-rc2, =0.1.0, =3.0.0, =3.0.0-rc2, =3.0.0-rc3 Source cves: CVE-2020-11994 Source advisory: GHSA-9VFJ-5G7H-4P24...

CVE-2020-7588

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC IT LMS All...

CVE-2020-7581

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC Notifier...

CVE-2020-7581

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD V8.0, SIMATIC Notifier...

CVE-2020-7587

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD V8.0, SIMATIC IT LMS All...

CVE-2020-7581

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC Notifier...

CVE-2020-7581

CVE-2020-7581 affects Siemens/Opcenter components (Discrete/Foundation/Process, Intelligence, Quality, RD&L) and related SIMATIC/Soft Starter/PCS neo, STEP 7, SIMOCODE ES, and Notifier Server. Root cause: an internal component calls a helper binary with SYSTEM privileges during startup via an unq...

CVE-2020-7588: Improper Input Validation

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC IT LMS All...

CVE-2020-7581: Unquoted Search Path or Element

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC Notifier...

CVE-2020-7587: Uncontrolled Resource Consumption

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC IT LMS All...