EUVD-2010-3186

Malware in sbrugna...

EUVD-2007-0411

Malware in sbrugna...

EUVD-2022-5771

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-13577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial o...

io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-integration-test-logging (>=1.5.8, <=1.5.10) +325 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.13.5.final)

io.quarkus:quarkus-resteasy MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-integration-test-client =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

CVE-2020-13574

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

io.quarkiverse.cxf:quarkus-cxf-deployment (1.5.2), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (1.5.2) +8 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.5.2)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.5.2 -...

SUSE CVE-2020-13574

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

SUSE CVE-2020-13577

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

net.gplatform:sudoor-server-lib (>=1.0.4, <=1.0.8), no.difi.sdp:sikker-digital-post-java-klient (>=1.0, <=1.2.0.rc1) +33 more potentially affected by CVE-2015-0226 via org.apache.wss4j:wss4j-ws-security-dom (>=2.0.0, <=2.0.1)

org.apache.wss4j:wss4j-ws-security-dom MAVEN version =2.0.0, =1.0.4, =1.0, =0.9, =0.9, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 and more Source cves: CVE-2015-0226 Source advisory: GHSA-VJWC-5HFH-2VV5...

net.gplatform:sudoor-server-lib (>=1.0.4, <=1.0.8), no.difi.sdp:sikker-digital-post-java-klient (>=1.0, <=1.2.0.rc1) +33 more potentially affected by CVE-2015-0226 via org.apache.wss4j:wss4j-ws-security-dom (>=2.0.0, <=2.0.1)

org.apache.wss4j:wss4j-ws-security-dom MAVEN version =2.0.0, =1.0.4, =1.0, =0.9, =0.9, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 and more Source cves: CVE-2015-0226 Source advisory: OSV:GHSA-VJWC-5HFH-2VV5...

Improper Authentication in Apache CXF

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

GHSA-XF9F-32GH-H2W4 Improper Authentication in Apache CXF

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

com.fluxcorp.plugins:webservice-trigger (>=1.0.2, <=1.0.4), com.github.mkluas:web-admin (>=1.0.0, <=1.1.0) +76 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.0.6, <=2.6.11)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.0.6, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.0.3, =2.5.0, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.3 and more Source cves: CVE-2014-0034 Source advisory: OSV:GHSA-38X2-FP9M-87MX...

com.fluxcorp.plugins:webservice-trigger (>=1.0.2, <=1.0.4), com.github.mkluas:web-admin (>=1.0.0, <=1.1.0) +76 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.0.6, <=2.6.11)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.0.6, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.0.3, =2.5.0, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.3 and more Source cves: CVE-2014-0034 Source advisory: GHSA-38X2-FP9M-87MX...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +38 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.7.0, <=2.7.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.7.0, =1.1.7, =1.1.9, =1.2.5, =ec2-2013-02-01, =1.0.1, =1.0.0, =1.0.0, =1.1, =2.11.0, =2.12.2 - org.apache.cxf.fediz.examples.wsclientwebapp.webservice:fedizservice 1.1.0 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp 1.1.0 -...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +38 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.7.0, <=2.7.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.7.0, =1.1.7, =1.1.9, =1.2.5, =ec2-2013-02-01, =1.0.1, =1.0.0, =1.0.0, =1.1, =2.11.0, =2.12.2 - org.apache.cxf.fediz.examples.wsclientwebapp.webservice:fedizservice 1.1.0 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp 1.1.0 -...

net.gplatform:sudoor-server-lib (>=1.0.4, <=1.0.8), no.difi.sdp:sikker-digital-post-java-klient (>=1.0, <=1.2.0.rc1) +33 more potentially affected by CVE-2014-3623 via org.apache.wss4j:wss4j-ws-security-dom (>=2.0.0, <=2.0.1)

org.apache.wss4j:wss4j-ws-security-dom MAVEN version =2.0.0, =1.0.4, =1.0, =0.9, =0.9, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 and more Source cves: CVE-2014-3623 Source advisory: OSV:GHSA-99V3-9X35-C5VF...

net.gplatform:sudoor-server-lib (>=1.0.4, <=1.0.8), no.difi.sdp:sikker-digital-post-java-klient (>=1.0, <=1.2.0.rc1) +33 more potentially affected by CVE-2014-3623 via org.apache.wss4j:wss4j-ws-security-dom (>=2.0.0, <=2.0.1)

org.apache.wss4j:wss4j-ws-security-dom MAVEN version =2.0.0, =1.0.4, =1.0, =0.9, =0.9, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 and more Source cves: CVE-2014-3623 Source advisory: GHSA-99V3-9X35-C5VF...

GHSA-P5C5-6564-VVR8 Improper Authentication in Apache CXF

Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element...