ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +11554 more potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.70)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2023-24998 Source advisory: OSV:GHSA-HFRX-6QGJ-FP6...

be.tomcools:rickroll-security-spring-boot-starter (>=3.0.0, <=3.1.0), berlin.yuna:paginator (>=0.1.43, <=0.1.47) +464 more potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =3.0.0, =0.1.43, =2.0.0, =1.34.0, =2023.1.0.0, =2023.1.0.0, =2023.0.0.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.0, =2023.0.0.2-alpha.2 and more Source cves: CVE-2023-24998 Source advisory: GHSA-HFRX-6QGJ-FP6C...

org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m3, <=11.0.0-m4), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m3, <=11.0.0-m4) potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m3, <=11.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m3, =11.0.0-m3, =11.0.0-m3, =11.0.0-m4 Source cves: CVE-2023-24998 Source advisory: OSV:GHSA-HFRX-6QGJ-FP6C...

be.tomcools:rickroll-security-spring-boot-starter (>=3.0.0, <=3.1.0), berlin.yuna:paginator (>=0.1.43, <=0.1.47) +464 more potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =3.0.0, =0.1.43, =2.0.0, =1.34.0, =2023.1.0.0, =2023.1.0.0, =2023.0.0.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.0, =2023.0.0.2-alpha.2 and more Source cves: CVE-2023-24998 Source advisory: OSV:GHSA-HFRX-6QGJ-FP6C...

com.linecorp.armeria:armeria-tomcat8 (>=1.22.0, <=1.25.3), com.tvd12:ezyhttp-server-tomcat (>=1.1.2, <=1.4.4) +12 more potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.85, <=8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.85, =1.22.0, =1.1.2, =1.0, =2.7.0, =3.2.0-beta.5, =3.2.0-beta.5, =3.2.0-beta.5, =1.20.0, =1.20.0, =8.5.85, =8.5.85, =1.3.16, =1.3.19 Source cves: CVE-2023-24998 Source advisory: OSV:GHSA-HFRX-6QGJ-FP6C...

org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m3, <=11.0.0-m4), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m3, <=11.0.0-m4) potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m3, <=11.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m3, =11.0.0-m3, =11.0.0-m3, =11.0.0-m4 Source cves: CVE-2023-24998 Source advisory: GHSA-HFRX-6QGJ-FP6C...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +11554 more potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.70)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2023-24998 Source advisory: GHSA-HFRX-6QGJ-FP6C...

org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m3, <=11.0.0-m4), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m3, <=11.0.0-m4) potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m3, <=11.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m3, =11.0.0-m3, =11.0.0-m3, =11.0.0-m4 Source cves: CVE-2023-24998 Source advisory: MEND:CVE-2023-24998...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +11554 more potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.70)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2023-24998 Source advisory: MEND:CVE-2023-24998...

com.linecorp.armeria:armeria-tomcat8 (>=1.22.0, <=1.25.3), com.tvd12:ezyhttp-server-tomcat (>=1.1.2, <=1.4.4) +12 more potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.85, <=8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.85, =1.22.0, =1.1.2, =1.0, =2.7.0, =3.2.0-beta.5, =3.2.0-beta.5, =3.2.0-beta.5, =1.20.0, =1.20.0, =8.5.85, =8.5.85, =1.3.16, =1.3.19 Source cves: CVE-2023-24998 Source advisory: MEND:CVE-2023-24998...

be.tomcools:rickroll-security-spring-boot-starter (>=3.0.0, <=3.1.0), berlin.yuna:paginator (>=0.1.43, <=0.1.47) +464 more potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =3.0.0, =0.1.43, =2.0.0, =1.34.0, =2023.1.0.0, =2023.1.0.0, =2023.0.0.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.0, =2023.0.0.2-alpha.2 and more Source cves: CVE-2023-24998 Source advisory: MEND:CVE-2023-24998...

SUSE CVE-2005-0752

The Plugin Finder Service PFS in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag...

SUSE CVE-2009-0847

The asn1bufimbed function in the ASN.1 decoder in MIT Kerberos 5 aka krb5 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service application crash via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmeti...

SUSE CVE-2009-2200

WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document...

SUSE CVE-2012-1957

An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remot...

SUSE CVE-2018-5995

The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call...

SUSE CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2022-48110

CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting XSS vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator who is addin...

AVideo contains Command injection when embedding a video link

Impact: An attacker could execute remote code on a system running wwbn/avideo Step to Reproduce: 1. Go to the My Videos tab https://demo.avideo.com/mvideos 2. Click "Embed a video link" Append a command to the url as a query string. eg. ?whoami then click Save This issue has been resolved in comm...

WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software YouTube Embed, Playlist and Popup by WpDevArt Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24002 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b671b670100b...