4484 matches found
art.rightbrain.tool.vega:vega_api (>=1.0.0, <=1.0.3), au.csiro.pathling:fhir-server (6.2.1) +799 more potentially affected by CVE-2023-24998 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.71, <=9.0.73)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.71, =1.0.0, =1.0.1, =1.1.3, =1.1.8 and more Source cves: CVE-2023-24998, CVE-2023-28709 Source advisory: OSV:GHSA-CX6H-86XW-9X34...
org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m3, <=11.0.0-m4), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m3, <=11.0.0-m4) potentially affected by CVE-2023-24998 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m3, <=11.0.0-m4)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m3, =11.0.0-m3, =11.0.0-m3, =11.0.0-m4 Source cves: CVE-2023-24998, CVE-2023-28709 Source advisory: GHSA-CX6H-86XW-9X34...
ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache (6.6.0), ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-okhttp (6.6.0) +440 more potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (9.0.74)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.74 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache 6.6.0 -...
org.apache.tomcat.embed:tomcat-embed-jasper (11.0.0-m5), org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m5) potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (11.0.0-m5)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 11.0.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 11.0.0-m5 -...
org.apache.tomcat.embed:tomcat-embed-jasper (11.0.0-m5), org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m5) potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (11.0.0-m5)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 11.0.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 11.0.0-m5 -...
ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache (6.6.0), ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-okhttp (6.6.0) +440 more potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (9.0.74)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.74 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache 6.6.0 -...
ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +513 more potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (10.1.8)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 10.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ai.stapi:axon-system-plugin =0.0.22, =0.0.28, =0.0.11, =0.1.59, =1.1.4.2,...
ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +513 more potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (10.1.8)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 10.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ai.stapi:axon-system-plugin =0.0.22, =0.0.28, =0.0.11, =0.1.59, =1.1.4.2,...
ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +513 more potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (10.1.8)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 10.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ai.stapi:axon-system-plugin =0.0.22, =0.0.28, =0.0.11, =0.1.59, =1.1.4.2,...
ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache (6.6.0), ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-okhttp (6.6.0) +440 more potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (9.0.74)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.74 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache 6.6.0 -...
org.apache.tomcat.embed:tomcat-embed-jasper (11.0.0-m5), org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m5) potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (11.0.0-m5)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 11.0.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 11.0.0-m5 -...
Debian DSA-5424-1 : php7.4 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5424 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The...
Debian DSA-5425-1 : php8.2 - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5425 advisory. It was discovered that PHP's implementation of SOAP HTTP Digest authentication performed insufficient error validation, which may result in a stack information leak or use...
DEBIAN-CVE-2023-32683
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A discovered oEmbed or image URL can bypass the urlpreviewurlblacklist setting potentially allowing server side request forgery or bypassing network policies. Impact is limited to IP addresses allowed by the...
Matrix Synapse code issue vulnerabilities
Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the UK. A code issue vulnerability exists in Matrix Synapse versions prior to 1.85.0 that stems from the urlpreviewurlblacklist setting that can be bypassed via oEmbed or URL...
org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m3, <=11.0.0-m4), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m3, <=11.0.0-m4) potentially affected by CVE-2023-24998 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m3, <=11.0.0-m4)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m3, =11.0.0-m3, =11.0.0-m3, =11.0.0-m4 Source cves: CVE-2023-24998, CVE-2023-28709 Source advisory: MEND:CVE-2023-28709...
art.rightbrain.tool.vega:vega_api (>=1.0.0, <=1.0.3), au.csiro.pathling:fhir-server (6.2.1) +799 more potentially affected by CVE-2023-24998 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.71, <=9.0.73)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.71, =1.0.0, =1.0.1, =1.1.3, =1.1.8 and more Source cves: CVE-2023-24998, CVE-2023-28709 Source advisory: MEND:CVE-2023-28709...
berlin.yuna:paginator (>=0.1.48, <=0.1.58), cc.vihackerframework:vihacker-common-starter (1.0.8.r) +512 more potentially affected by CVE-2023-24998 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.5, <=10.1.7)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.5, =0.1.48, =1.0.0, =2023.2.1.0, =2023.3.1.0 - cn.taketoday:today-framework 4.0.0-draft.3 - cn.taketoday:today-test 4.0.0-draft.3 - cn.taketoday:today-websocket 4.0.0-draft.3 - com.aerospike:sync 0.9.0 -...
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Description WordPress does not validate the protocol when processing oEmbed discovery, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...