org.eclipse.jetty.aggregate:jetty-all (7.6.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (7.6.20.v20160902) +4 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.6.20.v20160902)

org.eclipse.jetty:jetty-servlets MAVEN version 7.6.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.20.v20160902 -...

org.eclipse.jetty.aggregate:jetty-all (8.0.0.m2), org.eclipse.jetty.aggregate:jetty-all-server (8.0.0.m2) +2 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.0.0.m2)

org.eclipse.jetty:jetty-servlets MAVEN version 8.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.0.0.m2 - org.eclipse.jetty.aggregate:jetty-all-serve...

org.eclipse.jetty.aggregate:jetty-all (7.4.3.v20110701), org.eclipse.jetty.aggregate:jetty-all-server (7.4.3.v20110701) +5 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.4.3.v20110701)

org.eclipse.jetty:jetty-servlets MAVEN version 7.4.3.v20110701 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.4.3.v20110701 -...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc1) +2 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.1.0.rc1)

org.eclipse.jetty:jetty-servlets MAVEN version 7.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc1 -...

org.eclipse.jetty.aggregate:jetty-all (7.4.1.v20110513), org.eclipse.jetty.aggregate:jetty-all-server (7.4.1.v20110513) +5 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.4.1.v20110513)

org.eclipse.jetty:jetty-servlets MAVEN version 7.4.1.v20110513 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.4.1.v20110513 -...

org.apache.camel:camel-example-cxf (2.3.0), org.apache.camel:camel-jetty (2.3.0) +6 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.1.v20091125)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.1.v20091125 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.apache.camel:camel-example-cxf 2.3.0 - org.apache.camel:camel-jetty 2.3.0 -...

org.eclipse.jetty.aggregate:jetty-all (7.1.2.v20100523), org.eclipse.jetty.aggregate:jetty-all-server (7.1.2.v20100523) +2 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.1.2.v20100523)

org.eclipse.jetty:jetty-servlets MAVEN version 7.1.2.v20100523 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.2.v20100523 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc1) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.rc1)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc1 -...

org.cometd.java:cometd-java-examples (>=2.7.0-beta2, <=2.7.0-rc1), org.cometd:cometd-demo (>=2.7.0-beta2, <=2.7.0-rc1) +8 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.6.12.v20130726)

org.eclipse.jetty:jetty-servlets MAVEN version 7.6.12.v20130726 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.cometd.java:cometd-java-examples =2.7.0-beta2, =2.7.0-beta2, =2.7.0-rc1 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc2) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.rc2)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc2 -...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc0) +2 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.1.0.rc0)

org.eclipse.jetty:jetty-servlets MAVEN version 7.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc0 -...

org.eclipse.jetty.aggregate:jetty-all (8.1.18.v20150929), org.eclipse.jetty.aggregate:jetty-all-server (8.1.18.v20150929) +5 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.1.18.v20150929)

org.eclipse.jetty:jetty-servlets MAVEN version 8.1.18.v20150929 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.18.v20150929 -...

org.cometd:cometd-demo (2.0.beta1), org.eclipse.jetty.aggregate:jetty-all (7.1.3.v20100526) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.1.3.v20100526)

org.eclipse.jetty:jetty-servlets MAVEN version 7.1.3.v20100526 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.cometd:cometd-demo 2.0.beta1 - org.eclipse.jetty.aggregate:jetty-all...

org.eclipse.jetty.aggregate:jetty-all (8.1.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (8.1.20.v20160902) +4 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.1.20.v20160902)

org.eclipse.jetty:jetty-servlets MAVEN version 8.1.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.20.v20160902 -...

org.eclipse.jetty.aggregate:jetty-all (8.0.0.m0), org.eclipse.jetty.aggregate:jetty-all-server (8.0.0.m0) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.0.0.m0)

org.eclipse.jetty:jetty-servlets MAVEN version 8.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.0.0.m0 - org.eclipse.jetty.aggregate:jetty-all-serve...

org.cometd:cometd-demo (>=1.1.2, <=2.0.0), org.eclipse.jetty.aggregate:jetty-all (7.1.5.v20100705) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.1.5.v20100705)

org.eclipse.jetty:jetty-servlets MAVEN version 7.1.5.v20100705 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.cometd:cometd-demo =1.1.2, =2.0.0 - org.eclipse.jetty.aggregate:jetty-all...

org.apache.myfaces.extensions.scripting:myfaces20-example (>=1.0, <=1.0.6), org.apache.myfaces.trinidad:trinidad-demo (>=2.0.0-beta-1, <=2.1.2) +2 more potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.0.0.ga)

org.hibernate:hibernate-validator MAVEN version 4.0.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.apache.myfaces.extensions.scripting:myfaces20-example =1.0, =2.0.0-beta-1, =5.3.0,...

Apache Airflow 1.10.10 - (Example Dag) Remote Code Execution Exploit

Exploit Title: Apache Airflow 1.10.10 - 'Example Dag' Remote Code Execution Exploit Author: Pepe Berba Vendor Homepage: https://airflow.apache.org/ Software Link: https://airflow.apache.org/docs/apache-airflow/stable/installation.html Version: = 1.10.10 Tested on: Docker apache/airflow:1.10 .10...

Apache Airflow 1.10.10 Remote Code Execution

Exploit Title: Apache Airflow 1.10.10 - 'Example Dag' Remote Code Execution Date: 2021-06-02 Exploit Author: Pepe Berba Vendor Homepage: https://airflow.apache.org/ Software Link: https://airflow.apache.org/docs/apache-airflow/stable/installation.html Version: = 1.10.10 Tested on: Docker...

CVE-2021-32642

radsecproxy is a generic RADIUS proxy that supports both UDP and TLS RadSec RADIUS transports. Missing input validation in radsecproxy's naptr-eduroam.sh and radsec-dynsrv.sh scripts can lead to configuration injection via crafted radsec peer discovery DNS records. Users are subject to Informatio...