org.drools.planner:drools-planner-core (5.4.0.cr1), org.drools.planner:drools-planner-distribution (5.4.0.cr1) +35 more potentially affected by CVE-2014-8125 via org.drools:drools-core (5.4.0.cr1)

org.drools:drools-core MAVEN version 5.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.cr1 - org.drools.planner:drools-planner-distribution 5.4.0.cr1 -...

org.drools:drools-camel-server (5.3.5.final), org.jbpm:jbpm-distribution (5.2.5.final) +3 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.2.5.final)

org.jbpm:jbpm-bpmn2 MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.drools:drools-camel-server 5.3.5.final - org.jbpm:jbpm-distribution 5.2.5.final - org.jbpm:jbpm-examples...

org.apache.poi:poi-examples (3.11-beta1), org.apache.poi:poi-excelant (3.11-beta1) +2 more potentially affected by CVE-2014-3574 via org.apache.poi:poi (3.11-beta1)

org.apache.poi:poi MAVEN version 3.11-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - org.apache.poi:poi-examples 3.11-beta1 - org.apache.poi:poi-excelant 3.11-beta1 - org.apache.poi:poi-ooxml 3.11-beta1 ...

com.github.sakserv:hadoop-mini-clusters (0.0.14), de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2) +10 more potentially affected by CVE-2017-15712 via org.apache.oozie:oozie-core (>=4.1.0, <=4.2.0)

org.apache.oozie:oozie-core MAVEN version =4.1.0, =1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.2.0 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2017-15712 Source advisory: GHSA-2FX6-R6QX-3C7H...

com.github.albfernandez:jbpm (>=3.2.10-1-sp3_seam2_hibernate5, <=3.2.11.ayg), com.github.albfernandez:jbpm-enterprise (>=3.2.10-1-sp3_seam2_hibernate5, <=3.2.11.ayg) +6 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.6.2)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - com.github.albfernandez:jbpm =3.2.10-1-sp3seam2hibernate5,...

org.eclipse.jetty:jetty-ajp (7.0.0.m0), org.eclipse.jetty:jetty-annotations (7.0.0.m0) +13 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.m0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty:jetty-ajp 7.0.0.m0 - org.eclipse.jetty:jetty-annotations 7.0.0.m0 -...

org.apache.reef:reef-examples (0.16.0), org.apache.reef:reef-examples-clr (>=0.14.0, <=0.16.0) +3 more potentially affected by CVE-2017-9790 via org.apache.mesos:mesos (0.25.0)

org.apache.mesos:mesos MAVEN version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.reef:reef-examples 0.16.0 - org.apache.reef:reef-examples-clr =0.14.0, =0.14.0, =0.14.0, =0.16.0 Source...

org.spark-project:spark-bagel_2.9.2 (>=0.5.1, <=0.5.2), org.spark-project:spark-core_2.9.2 (>=0.5.1, <=0.5.2) +2 more potentially affected by CVE-2017-9790 via org.apache.mesos:mesos (0.9.0-incubating)

org.apache.mesos:mesos MAVEN version 0.9.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.spark-project:spark-bagel2.9.2 =0.5.1, =0.5.1, =0.5.1, =0.5.1, =0.5.2 Source cves: CVE-2017-9790...

org.spark-project:spark-bagel_2.9.2 (>=0.5.1, <=0.5.2), org.spark-project:spark-core_2.9.2 (>=0.5.1, <=0.5.2) +2 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.9.0-incubating)

org.apache.mesos:mesos MAVEN version 0.9.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.spark-project:spark-bagel2.9.2 =0.5.1, =0.5.1, =0.5.1, =0.5.1, =0.5.2 Source cves: CVE-2017-7687...

org.apache.reef:reef-examples (0.16.0), org.apache.reef:reef-examples-clr (>=0.14.0, <=0.16.0) +3 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.25.0)

org.apache.mesos:mesos MAVEN version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.reef:reef-examples 0.16.0 - org.apache.reef:reef-examples-clr =0.14.0, =0.14.0, =0.14.0, =0.16.0 Source...

com.google.cloud:gcloud-java-examples (>=0.2.5, <=0.2.8), com.google.cloud:gcloud-java-nio-examples (>=0.2.5, <=0.2.8) +4 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.cloud:gcloud-java-examples =0.2.5, =0.2.5, =0.3.0, =0.3.0, =0.13.0-alpha -...

br.com.phdigitalcode:carga_planilha (0.0.1), com.github.kondaurovdev:apache_poi_2.11 (0.1.1) +6 more potentially affected by CVE-2016-5000 via org.apache.poi:poi-examples (>=3.7, <=3.13)

org.apache.poi:poi-examples MAVEN version =3.7, =1.0.5, =1.0, =0.6.1, =0.8, =0.8, =1.3.2 Source cves: CVE-2016-5000 Source advisory: GHSA-PMQQ-7WFV-JFFF...

br.com.phdigitalcode:carga_planilha (0.0.1), com.github.kondaurovdev:apache_poi_2.11 (0.1.1) +6 more potentially affected by CVE-2016-5000 via org.apache.poi:poi-examples (>=3.7, <=3.13)

org.apache.poi:poi-examples MAVEN version =3.7, =1.0.5, =1.0, =0.6.1, =0.8, =0.8, =1.3.2 Source cves: CVE-2016-5000 Source advisory: OSV:GHSA-PMQQ-7WFV-JFFF...

org.apache.beam:beam-runners-twister2 (>=2.23.0, <=2.77.0), org.apache.ignite:ignite-mesos (>=2.7.0, <=2.12.0) +5 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (1.5.0)

org.apache.mesos:mesos MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.beam:beam-runners-twister2 =2.23.0, =2.7.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.8.0 Source cves:...

ch.qos.logback:logback-examples (>=1.3.0-alpha0, <=1.3.0-alpha4) potentially affected by CVE-2018-8088 via org.slf4j:slf4j-ext (>=1.8.0-beta0, <=1.8.0-beta1)

org.slf4j:slf4j-ext MAVEN version =1.8.0-beta0, =1.3.0-alpha0, =1.3.0-alpha4 Source cves: CVE-2018-8088 Source advisory: GHSA-W77P-8CFG-2X43...

ch.qos.logback:logback-examples (>=1.3.0-alpha0, <=1.3.0-alpha4) potentially affected by CVE-2018-8088 via org.slf4j:slf4j-ext (>=1.8.0-beta0, <=1.8.0-beta1)

org.slf4j:slf4j-ext MAVEN version =1.8.0-beta0, =1.3.0-alpha0, =1.3.0-alpha4 Source cves: CVE-2018-8088 Source advisory: OSV:GHSA-W77P-8CFG-2X43...

Stripe: Tomcat Servlet Examples accessible at https://44.240.33.83:38443 and https://52.36.56.155:38443

Tomcat Servlet Examples were accessible from the internet. This report demonstrated that it was possible to disclose IP addresses of internal application servers...

GHSA-G77G-VJJM-X83J Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...

Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...

Apache Tomcat XSS Vulnerabilities in Examples Web Application

Multiple cross-site scripting XSS vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via...