3209 matches found
capital.scalable:spring-auto-restdocs-core (>=2.0.8, <=2.0.9), cc.cc4414:cc-spring-cloud-starter-gateway (0.5.1) +246 more potentially affected by CVE-2020-5398 via org.springframework:spring-webflux (>=5.2.0.release, <=5.2.2.release)
org.springframework:spring-webflux MAVEN version =5.2.0.release, =2.0.8, =1.0.0, =1.2.1, =0.5.4, =4.55.12, =4.59.2 - com.github.hetianyi:springboot-ready sb-2.2.2.release-23 - com.github.jchanghong:parent 3.0.11 and more Source cves: CVE-2020-5398 Source advisory: MEND:CVE-2020-5398...
com.github.pukkaone:odata-elasticsearch2-spring-boot-starter (1.4.0-0), com.github.pukkaone:odata-web-spring-boot-starter (1.4.0-0) +27 more potentially affected by CVE-2019-17554 via org.apache.olingo:odata-server-core (>=4.0.0, <=4.6.0)
org.apache.olingo:odata-server-core MAVEN version =4.0.0, =1.1.0-release, =1.0.0-release, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2.9 and more Source cves: CVE-2019-17554 Source advisory: MEND:CVE-2019-17554...
com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.4.final)
io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...
io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.9.final)
io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...
io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.7.final)
io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...
io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.3.28.final)
io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...
com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.3.final)
io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...
com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.3.27.final)
io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...
com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (3.6)
com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...
com.github.springbootplus:spring-boot-starter-allinone (2.0.1.release), com.malliina:mobile-push_2.12 (>=1.12.2, <=1.12.4) +7 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (5.9)
com.nimbusds:nimbus-jose-jwt MAVEN version 5.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.springbootplus:spring-boot-starter-allinone 2.0.1.release - com.malliina:mobile-push2.12...
UBUNTU-CVE-2019-2173
In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
com.baidubce.formula:launcher-spring-boot-starter (>=1.3.2.0, <=2.1.1.1), io.atlasmap:atlasmap-standalone (>=1.39.0, <=1.42.10) +27 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.4.26.final)
io.undertow:undertow-servlet MAVEN version 1.4.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - com.baidubce.formula:launcher-spring-boot-starter =1.3.2.0, =1.39.0, =0.10.0.release,...
io.undertow:undertow-websockets-jsr (1.3.18.final), org.springframework.boot:spring-boot-starter-undertow (1.3.3.release) +1 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.3.18.final)
io.undertow:undertow-servlet MAVEN version 1.3.18.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.3.18.final -...
io.undertow:undertow-websockets-jsr (1.3.28.final), org.springframework.boot:spring-boot-starter-undertow (>=1.4.6.release, <=1.4.7.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.3.28.final)
io.undertow:undertow-servlet MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.3.28.final -...
io.undertow:undertow-websockets-jsr (1.1.9.final), org.springframework.boot:spring-boot-starter-undertow (1.2.8.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.9.final)
io.undertow:undertow-servlet MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.1.9.final -...
io.undertow:undertow-websockets-jsr (1.1.7.final), org.springframework.boot:spring-boot-starter-undertow (1.2.5.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.7.final)
io.undertow:undertow-servlet MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.1.7.final -...
de.adorsys.oauth:oauth-wildfly-support (>=0.12, <=0.35), io.undertow:undertow-websockets-jsr (1.1.8.final) +1 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.8.final)
io.undertow:undertow-servlet MAVEN version 1.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - de.adorsys.oauth:oauth-wildfly-support =0.12, =1.2.6.release, =1.2.7.release Source cves:...
ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12), ai.grakn:grakn (>=0.17.0, <=0.18.0) +14590 more potentially affected by CVE-2019-14379 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.11.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2019-14379 Source advisory: MEND:CVE-2019-14379...
