org.apache.camel:camel-castor-starter (>=2.18.0, <=2.19.3) potentially affected by CVE-2017-12634 via org.apache.camel:camel-castor (>=2.18.0, <=2.19.3)

org.apache.camel:camel-castor MAVEN version =2.18.0, =2.18.0, =2.19.3 Source cves: CVE-2017-12634 Source advisory: GHSA-VF4Q-8MR7-5C5C...

org.apache.camel:camel-castor-starter (2.20.0) potentially affected by CVE-2017-12634 via org.apache.camel:camel-castor (2.20.0)

org.apache.camel:camel-castor MAVEN version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-castor and may be impacted: - org.apache.camel:camel-castor-starter 2.20.0 Source cves: CVE-2017-12634 Source advisory:...

org.apache.storm:flux-core (0.10.0-beta1), org.apache.storm:flux-examples (0.10.0-beta1) +1 more potentially affected by CVE-2018-8008 via org.apache.storm:storm-core (0.10.0-beta1)

org.apache.storm:storm-core MAVEN version 0.10.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.storm:flux-core 0.10.0-beta1 - org.apache.storm:flux-examples 0.10.0-beta1 -...

org.apache.camel:camel-snakeyaml-starter (>=2.18.0, <=2.18.1) potentially affected by CVE-2017-3159 via org.apache.camel:camel-snakeyaml (>=2.18.0, <=2.18.1)

org.apache.camel:camel-snakeyaml MAVEN version =2.18.0, =2.18.0, =2.18.1 Source cves: CVE-2017-3159 Source advisory: OSV:GHSA-HVPR-9CR6-Q5V7...

org.apache.camel:camel-snakeyaml-starter (>=2.18.0, <=2.18.1) potentially affected by CVE-2017-3159 via org.apache.camel:camel-snakeyaml (>=2.18.0, <=2.18.1)

org.apache.camel:camel-snakeyaml MAVEN version =2.18.0, =2.18.0, =2.18.1 Source cves: CVE-2017-3159 Source advisory: GHSA-HVPR-9CR6-Q5V7...

org.apache.camel:camel-mail-starter (>=2.20.0, <=2.20.3), org.wildfly.camel.example:example-camel-mail (>=5.0.0, <=5.1.0) potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (>=2.20.0, <=2.20.3)

org.apache.camel:camel-mail MAVEN version =2.20.0, =2.20.0, =5.0.0, =5.1.0 Source cves: CVE-2018-8041 Source advisory: MEND:CVE-2018-8041...

org.apache.camel:camel-mail-starter (>=2.21.0, <=2.21.1), org.wildfly.camel.example:example-camel-mail (6.0.0) potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (>=2.21.0, <=2.21.1)

org.apache.camel:camel-mail MAVEN version =2.21.0, =2.21.0, =2.21.1 - org.wildfly.camel.example:example-camel-mail 6.0.0 Source cves: CVE-2018-8041 Source advisory: MEND:CVE-2018-8041...

app.myoss.wechat:wechat-starter-core (1.1.0.release), app.myoss.wechat:wechat-starter-mini-app (1.1.0.release) +87 more potentially affected by CVE-2018-1000632 via org.dom4j:dom4j (>=2.0.0-rc1, <=2.0.2)

org.dom4j:dom4j MAVEN version =2.0.0-rc1, =3.0.0, =0.0.5, =0.0.5, =0.0.5, =1.0.release, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.8 and more Source cves: CVE-2018-1000632 Source advisory: MEND:CVE-2018-1000632...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: MEND:CVE-2018-12432...

itemsapi-starter (1.0.3), larvitblog (>=0.1.1, <=0.4.1) +8 more potentially affected by CVE-2016-10578 via unicode (0.6.1)

unicode NPM version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on unicode and may be impacted: - itemsapi-starter 1.0.3 - larvitblog =0.1.1, =0.1.1, =0.1.1, =0.10.7, =2.0.0, =1.1.0, =1.1.7, =1.2.0, =1.2.15 Source cves: CVE-2016-10578 Source...

LocalTapiola: Reflected XSS of bbe-child-starter Theme via "value"-GET-parameter

This bug is related to 324442. And xss in other url. poc: https://www.lahitapiolarahoitus.fi/wp-content/themes/bbe-child-starter/bbe-engine/assets/actions/bbeopenhtmleditorpopup.php?attribute=%27%3C/script%3E%3Cbody%20onload&value=alertdocument.cookie Impact -Make admin-user run malicious...

Joomla Acymailing Starter 5.9.5 Component - CSV Macro Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Acymailing Starter 5.9.5 CSV Macro Injection Exploit Author: Sureshbabu Narvaneni Vendor Homepage: https://www.acyba.com Software Link: https://extensions.joomla.org/extension/acymailing-starter/ Affected...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +1 more potentially affected by CVE-2018-1000009 via org.jvnet.hudson.plugins:checkstyle (>=3.32, <=3.43)

org.jvnet.hudson.plugins:checkstyle MAVEN version =3.32, =1.7.2, =1.0.0, =1.7.1 - org.jenkins-ci.plugins:php 1.0 Source cves: CVE-2018-1000009 Source advisory: MEND:CVE-2018-1000009...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +1 more potentially affected by CVE-2018-1000008 via org.jvnet.hudson.plugins:pmd (>=3.33, <=3.42)

org.jvnet.hudson.plugins:pmd MAVEN version =3.33, =1.7.2, =1.0.0, =1.7.1 - org.jenkins-ci.plugins:php 1.0 Source cves: CVE-2018-1000008 Source advisory: MEND:CVE-2018-1000008...

Siemens Industrial Products (Update D)

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Industrial products Vulnerability: Improper Input Validation UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-17-339-01C Siemens Industrial Products that w...

org.apache.camel:camel-castor-starter (>=2.18.0, <=2.19.3) potentially affected by CVE-2017-12634 via org.apache.camel:camel-castor (>=2.18.0, <=2.19.3)

org.apache.camel:camel-castor MAVEN version =2.18.0, =2.18.0, =2.19.3 Source cves: CVE-2017-12634 Source advisory: MEND:CVE-2017-12634...

org.apache.camel:camel-castor-starter (2.20.0) potentially affected by CVE-2017-12634 via org.apache.camel:camel-castor (2.20.0)

org.apache.camel:camel-castor MAVEN version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-castor and may be impacted: - org.apache.camel:camel-castor-starter 2.20.0 Source cves: CVE-2017-12634 Source advisory:...

org.apache.camel:camel-hessian-starter (>=2.18.0, <=2.19.3) potentially affected by CVE-2017-12633 via org.apache.camel:camel-hessian (>=2.18.0, <=2.19.3)

org.apache.camel:camel-hessian MAVEN version =2.18.0, =2.18.0, =2.19.3 Source cves: CVE-2017-12633 Source advisory: MEND:CVE-2017-12633...

org.apache.camel:camel-hessian-starter (2.20.0) potentially affected by CVE-2017-12633 via org.apache.camel:camel-hessian (2.20.0)

org.apache.camel:camel-hessian MAVEN version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-hessian and may be impacted: - org.apache.camel:camel-hessian-starter 2.20.0 Source cves: CVE-2017-12633 Source advisory:...

cc.autoapi.pucong:auto-flow-core-flow (>=2.0.0, <=2.0.9), cc.autoapi.pucong:auto-flow-persistence (>=2.0.0, <=2.0.9) +179 more potentially affected by CVE-2016-4000 via org.python:jython-standalone (>=2.5.2, <=2.7.1b2)

org.python:jython-standalone MAVEN version =2.5.2, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =1.0.0, =1.3.0, =1.0, =1.0-m1, =1.0-m3, =0.2.13, =0.2.13, =1.0.0, =1.1.0 and more Source cves: CVE-2016-4000 Source advisory: MEND:CVE-2016-4000...