186 matches found
ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4 <=0.5), ch.ralscha:extdirectspring (=1.4.0) +75 more potentially affected by CVE-2014-1904 via org.springframework:spring-webmvc (>=4.0.0.RELEASE <=4.0.1.RELEASE)
org.springframework:spring-webmvc MAVEN version =4.0.0.RELEASE, =0.4, =0.1.1-alpha, =0.2-alpha, =1.0.0, =2.0.3.2.1, =2.1.3.10.1, =2.0.3.6, =2.0.3.6, =2.1.2.7.1, =2.0.3.1, =2.1.4.19 and more Source cves: CVE-2014-1904 Source advisory: OSV:GHSA-FF7P-JQJM-V66H...
ar.com.onready:spring-resttemplate-logger (=1.0.2), at.molindo.social:spring-social-config (=1.1.0.RELEASE) +923 more potentially affected by CVE-2014-3578 via org.springframework:spring-core (>=4.0.0.RELEASE <=4.0.4.RELEASE)
org.springframework:spring-core MAVEN version =4.0.0.RELEASE, =1.0.0, =0.9.0-1, =0.4, =1.4.0, =1.0.0, =0.0.2, =1.5.0.20171107, =1.6.1.20180301 - com.allenru:cross-origin =1.0.1 and more Source cves: CVE-2014-3578 Source advisory: OSV:GHSA-RHCG-RWHX-QJ3J...
be.objectify:objectify-struts2-tags (=1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0 <=2.0.8) +207 more potentially affected by CVE-2014-0112 via org.apache.struts:struts2-core (>=2.0.5 <=2.3.1.2)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =0.5.9, =1.2.0, =1.0.0, =2.0, =1.0.3, =1.2.2, =1.4.0 and more Source cves: CVE-2014-0112 Source advisory: OSV:GHSA-PRJV-JJ26-WF8H...
ca.ibodrov.concord:testcontainers-concord (>=0.0.2 <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21 <=2.0.2) +231 more potentially affected by CVE-2017-7561 via org.jboss.resteasy:resteasy-jaxrs (=3.1.4.Final)
org.jboss.resteasy:resteasy-jaxrs MAVEN version =3.1.4.Final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - ca.ibodrov.concord:testcontainers-concord =0.0.2, =0.0.21, =0.0.2, =0.0.1, =1.0.6.Fina...
be.ordina:microservices-dashboard-server (=1.0.1), br.com.ingenieux:apigateway-maven-plugin (>=1.5.1 <=1.5.6) +1495 more potentially affected by CVE-2015-7501 via org.apache.commons:commons-collections4 (=4.0)
org.apache.commons:commons-collections4 MAVEN version =4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-collections4 and may be impacted: - be.ordina:microservices-dashboard-server =1.0.1 -...
aero.m-click:mcpdf (>=0.2.0 <=0.2.1), at.iem:sysson_2.11 (>=1.13.0 <=1.16.0) +349 more potentially affected by CVE-2017-9096 via com.itextpdf:itextpdf (>=5.0.6 <=5.5.11)
com.itextpdf:itextpdf MAVEN version =5.0.6, =0.2.0, =1.13.0, =1.13.0, =2.0.0, =1.2.1, =3.0.0, =2.0.0, =1.0, =1.1.4, =1.1.4, =1.1.4, =1.1.6 and more Source cves: CVE-2017-9096 Source advisory: OSV:GHSA-86P9-X5PW-94QX...
ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), com.alibaba:dubbo (>=2.5.4 <=2.6.0) +427 more potentially affected by CVE-2017-12624 via org.apache.cxf:cxf-core (>=3.0.0-milestone1 <=3.0.15)
org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =2.5.4, =2.6.1, =5.4.2, =5.3.0, =0.0.1, =3.0.1, =3.1.2, =0.0.1, =0.6, =0.8 and more Source cves: CVE-2017-12624 Source advisory: OSV:GHSA-7VGJ-8MW4-HG8R...
at.salzburgresearch.nodekeeper:nodekeeper-java (>=1.0 <=1.2), ca.innovativemedicine:vcfimp-solr_2.10 (=0.7.0) +759 more potentially affected by CVE-2018-8012 via org.apache.zookeeper:zookeeper (>=3.3.0 <=3.4.1)
org.apache.zookeeper:zookeeper MAVEN version =3.3.0, =1.0, =0.2, =2.0.0, =1.0.0.RELEASE, =2.0.10, =2.5, =2.5, =2.6.11, =2.6.20, =5.0.1.5, =5.0.2, =6.5.5 - com.boozallen.cognition:cognition-spark-common =0.4.0 and more Source cves: CVE-2018-8012 Source advisory: OSV:GHSA-CCQF-C5HQ-77MP...
co.paralleluniverse:galaxy (>=1.1 <=1.2), co.paralleluniverse:quasar-galaxy (=0.2.0) +352 more potentially affected by CVE-2016-2141 via org.jgroups:jgroups (>=3.0.0.CR1 <=3.2.13.Final)
org.jgroups:jgroups MAVEN version =3.0.0.CR1, =1.1, =1.0.0-1, =1.0.7364, =1.0d13, =1.0d18, =1.0d13, =1.0d13, =0.13.1, =0.7.3, =0.8.0, =0.6.0, =1.0.1 and more Source cves: CVE-2016-2141 Source advisory: OSV:GHSA-RC7H-X6CQ-988Q...
com.github.jonathanswenson:bqjdbc (>=2.2.11 <=2.2.12), com.moz.fiji.hive:fiji-hive-lib (>=0.1.0 <=0.1.9) +62 more potentially affected by CVE-2009-4611 via org.mortbay.jetty:jetty (>=7.0.0pre0 <=7.0.0.pre5)
org.mortbay.jetty:jetty MAVEN version =7.0.0pre0, =2.2.11, =0.1.0, =0.1.18, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.18, =0.1.18, =0.1.18, =0.1.18, =0.1.18, =3.0.0, =3.0.1 and more Source cves: CVE-2009-4611 Source advisory: OSV:GHSA-6JXP-7G74-2RC3...
ai.preferred:venom (>=4.1.3 <=4.2.7), at.ganzleicht.vaadin:vaadin-client-compiler (=9.1.3) +1063 more potentially affected by CVE-2022-29546 via net.sourceforge.htmlunit:neko-htmlunit (>=2.21 <=2.60.0)
net.sourceforge.htmlunit:neko-htmlunit MAVEN version =2.21, =4.1.3, =1.0.0, =1.0.0, =1.0.0, =1, =2.0, =0.9.6, =0.9.6, =0.0.10, =0.14, =5.4.0, =5.4.0, =6.1.3 and more Source cves: CVE-2022-29546 Source advisory: OSV:GHSA-6JMM-MP6W-4RRG...
be.objectify:objectify-struts2-tags (=1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0 <=2.0.8) +203 more potentially affected by CVE-2011-3923 via org.apache.struts:struts2-core (>=2.0.11 <=2.3.1.1)
org.apache.struts:struts2-core MAVEN version =2.0.11, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =0.5.9, =1.2.0, =1.0.0, =2.0, =1.0.3, =1.2.2, =1.4.0 and more Source cves: CVE-2011-3923 Source advisory: OSV:GHSA-J68F-8H6P-9H5Q...
net.mingsoft:ms-ad (=1.0.0), net.mingsoft:ms-clean (>=1.0.0 <=1.0.1) +23 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (>=1.0.10 <=2.1.15)
net.mingsoft:ms-basic MAVEN version =1.0.10, =1.0.0, =1.0.4, =1.0.0, =4.6.3-SNAPSHOTS, =1.0.0, =1.0.4, =1.0.0, =1.0.1, =1.0.1, =1.0.2 and more Source cves: CVE-2021-46062 Source advisory: OSV:GHSA-RPVR-MW7R-25XX...
animl (>=1.1.2 <=1.1.4), audio-classification-models (=1.0.1) +7 more potentially affected by CVE-2022-23581 via tensorflow-gpu (>=2.6.0 <=2.6.2)
tensorflow-gpu PYPI version =2.6.0, =1.1.2, =0.1.5, =0.1.0, =0.9.0, =1.0.5, =1.0.6 Source cves: CVE-2022-23581 Source advisory: OSV:GHSA-FQ86-3F29-PX2C...
@ahora/socket.io (=3.0.3), @azteam/express (>=1.2.33 <=1.2.142) +22 more potentially affected by CVE-2022-21676 via engine.io (>=4.0.6 <=4.1.1)
engine.io NPM version =4.0.6, =1.2.33, =1.12.0, =3.0.0, =2.0.0-beta.6, =2.3.0-beta.20, =1.1.3, =2.2.26-3, =2.0.0, =0.9.301, =1.0.0, =0.4.0, =0.4.3 and more Source cves: CVE-2022-21676 Source advisory: OSV:GHSA-273R-MGR4-V34F...
ai.ylyue:yue-library-auth-client (>=j8.2.3.0 <=j11.2.3.3), ai.ylyue:yue-library-auth-service (>=j8.2.3.0 <=j11.2.3.3) +7553 more potentially affected by CVE-2021-22060 via org.springframework:spring-core (>=5.2.0.RELEASE <=5.2.18.RELEASE)
org.springframework:spring-core MAVEN version =5.2.0.RELEASE, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =2.3.0.RELEASE, =2.3.0.RELEASE, =2.3.0.RELEASE, =2.3.0.RELEASE, =2.3.0.RELEASE, =2.3.1.RELEASE and more Source cves:...
com.barchart.http:barchart-http-handlers (>=1.0.6 <=1.0.7), com.barchart.http:barchart-http-server (>=1.0.6 <=1.0.7) +14 more potentially affected by CVE-2021-43797 via io.netty:netty (>=4.0.0.Alpha1 <=4.0.0.Alpha8)
io.netty:netty MAVEN version =4.0.0.Alpha1, =1.0.6, =1.0.6, =0.3, =0.3, =0.2, =1.3.0, =1.0.0.Alpha1, =1.0.0.Alpha2 and more Source cves: CVE-2021-43797 Source advisory: OSV:GHSA-WX5J-54MM-RQQQ...
ca.ibodrov.concord:testcontainers-concord (>=0.0.2 <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21 <=0.0.41) +359 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (>=2.0.0 <=9.1.5)
com.cronutils:cron-utils MAVEN version =2.0.0, =0.0.2, =0.0.21, =0.0.1, =1.0.30 - com.baomidou:jobs-spring-boot-starter =1.0.3 - com.cronutils:cron-utils-spring =1.0.1 - com.elastisys:autoscaler.core =5.2.2 - com.elastisys:autoscaler.distro.standard =5.2.2 -...
cn.aghost:nacos-address (>=1.2.1.aghost-fix.20201109 <=1.2.1.aghost-fix.20210122), cn.aghost:nacos-console (>=1.2.1.aghost-fix.20201109 <=1.2.1.aghost-fix.20210122) +323 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (>=2.1.0 <=2.1.4)
org.apache.mina:mina-core MAVEN version =2.1.0, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.0.0, =2.5.2.RELEASE, =0.1.45, =0.7.6, =1.2.6-RELEASE, =1.2.1-RELEASE,...
br.com.guiabolso:hyperloop-transport (>=3.0.1 <=3.0.2), com.eoniantech:secrets-locker (>=1.0 <=1.2) +8 more potentially affected by CVE-2020-8897 via com.amazonaws:aws-encryption-sdk-java (>=0.0.1 <=1.9.0)
com.amazonaws:aws-encryption-sdk-java MAVEN version =0.0.1, =3.0.1, =1.0, =2.3.2, =0.3.0, =2.8.0, =2.11.1 - org.apache.ignite:ignite-aws-ext =1.0.0 - org.dreamhorizon:vertx-cron =1.0.0 - software.amazon.cloudformation:aws-cloudformation-rpdk-java-plugin =2.0.12 Source cves: CVE-2020-8897 Source...