org.apache.camel:camel-spring-batch (>=2.13.0, <=2.13.4), org.springframework.batch:spring-batch-test (2.2.5.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.2.5.release)

org.springframework.batch:spring-batch-core MAVEN version 2.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - org.apache.camel:camel-spring-batch =2.13.0, =1.0.0.release,...

de.codecentric:spring-boot-starter-batch-web (1.0.0.release), org.springframework.batch:spring-batch-test (2.2.6.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.2.6.release)

org.springframework.batch:spring-batch-core MAVEN version 2.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - de.codecentric:spring-boot-starter-batch-web 1.0.0.release -...

com.github.chrisgleissner:spring-batch-rest-api (>=1.0.3, <=1.2.7), com.github.chrisgleissner:spring-batch-rest-example (>=1.0.3, <=1.2.7) +7 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (4.1.0.release)

org.springframework.batch:spring-batch-core MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - com.github.chrisgleissner:spring-batch-rest-api =1.0.3, =1.0.3,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12), ai.grakn:grakn (>=0.17.0, <=0.18.0) +14285 more potentially affected by CVE-2018-14720 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.11.2)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2018-14720 Source advisory: GHSA-X2W5-5M2G-7H5M...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12), ai.grakn:grakn (>=0.17.0, <=0.18.0) +14285 more potentially affected by CVE-2018-19361 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.11.2)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2018-19361 Source advisory: GHSA-MX9V-GMH4-MGQW...

com.microsoft.azure:azure-active-directory-b2c-spring-boot-starter (>=2.1.4.m1, <=2.1.6.m2), com.sap.cloud.security.xsuaa:spring-xsuaa (>=1.1.0.rc1, <=2.1.0) +4 more potentially affected by CVE-2018-15801 via org.springframework.security:spring-security-oauth2-jose (5.1.1.release)

org.springframework.security:spring-security-oauth2-jose MAVEN version 5.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-jose and may be impacted: -...

com.swisscom.cloud.sb:broker (>=4.0.0, <=4.2.5), org.springframework.credhub:spring-credhub-cloud-connector (>=1.0.0.release, <=1.0.1.release) +1 more potentially affected by CVE-2018-15795 via org.springframework.credhub:spring-credhub-core (>=1.0.0.release, <=1.0.1.release)

org.springframework.credhub:spring-credhub-core MAVEN version =1.0.0.release, =4.0.0, =1.0.0.release, =1.0.0.release, =1.0.1.release Source cves: CVE-2018-15795 Source advisory: GHSA-Q3JG-4C82-J4XH...

CVE-2018-19170: Improper Neutralization of Input During Web Page Generation

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...

PT-2018-14839

Name of the Vulnerable Software and Affected Versions JPress version 1.0-rc.5 Description The issue concerns stored XSS that can be triggered via the first three input fields. This is demonstrated by the web name parameter in the "/starter-tomcat-1.0/admin/setting" API endpoint. Recommendations F...

org.apache.storm:flux-core (0.10.0-beta), org.apache.storm:flux-examples (0.10.0-beta) +1 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.0-beta)

org.apache.storm:storm-core MAVEN version 0.10.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta - org.apache.storm:flux-examples 0.10.0-beta -...

org.apache.storm:flux-core (0.10.0-beta1), org.apache.storm:flux-examples (0.10.0-beta1) +1 more potentially affected by CVE-2018-1332 via org.apache.storm:storm-core (0.10.0-beta1)

org.apache.storm:storm-core MAVEN version 0.10.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta1 - org.apache.storm:flux-examples 0.10.0-beta1 -...

org.apache.storm:flux-core (0.10.0-beta), org.apache.storm:flux-examples (0.10.0-beta) +1 more potentially affected by CVE-2018-1331 via org.apache.storm:storm-core (0.10.0-beta)

org.apache.storm:storm-core MAVEN version 0.10.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta - org.apache.storm:flux-examples 0.10.0-beta -...

ai.ylyue:yue-library-auth-service (>=j8.2.2.0, <=2.1.0), ai.ylyue:yue-library-data-redis (>=finchley.sr4, <=greenwich.sr2.1) +3422 more potentially affected by CVE-2018-1000613 via org.bouncycastle:bcprov-jdk15on (>=1.57, <=1.59)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.57, =j8.2.2.0, =finchley.sr4, =1.1.1.release, =1.1.1.release, =2.0.8, =2.0.8, =2.0.8, =2.4, =0.6.0, =1.0.7, =0.5.0, =0.1.0, =1.0.0, =3.0.3 and more Source cves: CVE-2018-1000613 Source advisory: GHSA-4446-656P-F54G...

org.apache.camel:camel-mail-starter (>=2.21.0, <=2.21.1), org.wildfly.camel.example:example-camel-mail (6.0.0) potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (>=2.21.0, <=2.21.1)

org.apache.camel:camel-mail MAVEN version =2.21.0, =2.21.0, =2.21.1 - org.wildfly.camel.example:example-camel-mail 6.0.0 Source cves: CVE-2018-8041 Source advisory: GHSA-JV74-F9PJ-XP3F...

org.apache.camel:camel-mail-starter (>=2.20.0, <=2.20.3), org.wildfly.camel.example:example-camel-mail (>=5.0.0, <=5.1.0) potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (>=2.20.0, <=2.20.3)

org.apache.camel:camel-mail MAVEN version =2.20.0, =2.20.0, =5.0.0, =5.1.0 Source cves: CVE-2018-8041 Source advisory: OSV:GHSA-JV74-F9PJ-XP3F...

org.apache.camel:camel-mail-starter (>=2.21.0, <=2.21.1), org.wildfly.camel.example:example-camel-mail (6.0.0) potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (>=2.21.0, <=2.21.1)

org.apache.camel:camel-mail MAVEN version =2.21.0, =2.21.0, =2.21.1 - org.wildfly.camel.example:example-camel-mail 6.0.0 Source cves: CVE-2018-8041 Source advisory: OSV:GHSA-JV74-F9PJ-XP3F...

org.apache.camel:camel-mail-starter (2.22.0), org.nhind:direct-msg-monitor (>=6.0, <=8.1.0) +3 more potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (2.22.0)

org.apache.camel:camel-mail MAVEN version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-mail and may be impacted: - org.apache.camel:camel-mail-starter 2.22.0 - org.nhind:direct-msg-monitor =6.0, =6.0, =6.0, =8.1.0 -...

org.apache.camel:camel-mail-starter (>=2.20.0, <=2.20.3), org.wildfly.camel.example:example-camel-mail (>=5.0.0, <=5.1.0) potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (>=2.20.0, <=2.20.3)

org.apache.camel:camel-mail MAVEN version =2.20.0, =2.20.0, =5.0.0, =5.1.0 Source cves: CVE-2018-8041 Source advisory: GHSA-JV74-F9PJ-XP3F...

org.apache.camel:camel-castor-starter (>=2.18.0, <=2.19.3) potentially affected by CVE-2017-12634 via org.apache.camel:camel-castor (>=2.18.0, <=2.19.3)

org.apache.camel:camel-castor MAVEN version =2.18.0, =2.18.0, =2.19.3 Source cves: CVE-2017-12634 Source advisory: OSV:GHSA-VF4Q-8MR7-5C5C...

org.apache.camel:camel-castor-starter (2.20.0) potentially affected by CVE-2017-12634 via org.apache.camel:camel-castor (2.20.0)

org.apache.camel:camel-castor MAVEN version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-castor and may be impacted: - org.apache.camel:camel-castor-starter 2.20.0 Source cves: CVE-2017-12634 Source advisory:...