ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-42795 Source...

io.github.axinqiqi.http:xinapi-common (1.0.0), org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m1, <=11.0.0-m11) +1 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m11 Source cves: CVE-2023-42795 Source advisory: GHSA-G8PJ-R55Q-5C2V...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12483 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.80)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2.1 and more Source cves: CVE-2023-42795 Source advisory: GHSA-G8PJ-R55Q-5C2V...

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +1684 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.13)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 - be.vlaanderen.informatievlaanderen.vsds:ldes-server-retention 2.0.2 - be.vlaanderen.informatievlaanderen.vsds:mongo-retention-repository 2.0.2 an...

io.github.axinqiqi.http:xinapi-common (1.0.0), org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m1, <=11.0.0-m11) +1 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m11 Source cves: CVE-2023-42795 Source advisory: OSV:GHSA-G8PJ-R55Q-5C2V...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-42795 Source...

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +1684 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.13)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 - be.vlaanderen.informatievlaanderen.vsds:ldes-server-retention 2.0.2 - be.vlaanderen.informatievlaanderen.vsds:mongo-retention-repository 2.0.2 an...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-42795 Source...

io.github.axinqiqi.http:xinapi-common (1.0.0), org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m1, <=11.0.0-m11) +1 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m11 Source cves: CVE-2023-42795 Source advisory: MEND:CVE-2023-42795...

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +1684 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.13)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 - be.vlaanderen.informatievlaanderen.vsds:ldes-server-retention 2.0.2 - be.vlaanderen.informatievlaanderen.vsds:mongo-retention-repository 2.0.2 an...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12483 more potentially affected by CVE-2023-42795 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.80)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2.1 and more Source cves: CVE-2023-42795 Source advisory: MEND:CVE-2023-42795...

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +1703 more potentially affected by CVE-2023-44487 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0, <=10.1.13)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 - be.vlaanderen.informatievlaanderen.vsds:ldes-server-retention 2.0.2 - be.vlaanderen.informatievlaanderen.vsds:mongo-retention-repository 2.0.2 and...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4109 more potentially affected by CVE-2023-44487 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2023-44487 Source...

io.github.axinqiqi.http:xinapi-common (1.0.0), org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m1, <=11.0.0-m11) +1 more potentially affected by CVE-2023-44487 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m11 Source cves: CVE-2023-44487 Source advisory: MEND:CVE-2023-44487...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12474 more potentially affected by CVE-2023-44487 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.80)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2.1 and more Source cves: CVE-2023-44487 Source advisory: MEND:CVE-2023-44487...

Fedora 37 : ckeditor (2023-983ff03630)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-983ff03630 advisory. - 4.22.0/4.22.1 - 4.21.0 - GHSA-vh5c-xwqv-cv9g / CVE-2023-28439 - 4.20.2 - 4.20.1 Tenable has extracted the preceding description block directly from the...

Fedora 38 : ckeditor (2023-79b5902a52)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-79b5902a52 advisory. - 4.22.0/4.22.1 - 4.21.0 - GHSA-vh5c-xwqv-cv9g / CVE-2023-28439 - 4.20.2 - 4.20.1 Tenable has extracted the preceding description block directly from the...

CKEditor WYSIWYG Editor XSS

The vulnerability of the Iframe Dialog and Media Embed functions in the CKEditor WYSIWYG editor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

WordPress Laposta Signup Embed Plugin < 1.1.1 is vulnerable to Broken Access Control

Software Laposta Signup Embed Type Plugin Vulnerable versions 1.1.1 Fixed in 1.1.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c6c6c052c1a2 Credits Unknown Required privilege Subscriber...

WordPress Laposta Signup Embed Plugin < 1.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Laposta Signup Embed Type Plugin Vulnerable versions 1.1.1 Fixed in 1.1.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a512250807f5 Credits Unknown Required privilege...