org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc3), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc3) +9 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (6.0.0-rc3)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc3 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc4), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc4) +9 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (6.0.0-rc4)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc4 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0), org.glassfish.main.admingui:console-common-full-plugin (6.0.0) +9 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (6.0.0)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0 -...

org.glassfish.main.admingui:console-cluster-plugin (6.1.0), org.glassfish.main.admingui:console-common-full-plugin (6.1.0) +9 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (6.1.0)

org.glassfish.main.admingui:console-common MAVEN version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.1.0 -...

org.glassfish.main.admingui:console-cluster-plugin (3.1.2), org.glassfish.main.admingui:console-common-full-plugin (3.1.2) +6 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (3.1.2)

org.glassfish.main.admingui:console-common MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 3.1.2 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc1), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc1) +9 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (6.0.0-rc1)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc1 -...

org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-standalone-components (>=2.23.0-beta, <=2.23.1-beta) +2 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: OSV:GHSA-44C3-38H8-9FH9...

org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta) +8 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-spi-commons (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-spi-commons MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory:...

org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta) +8 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-spi-commons (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-spi-commons MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: OSV:GHSA-44C3-38H8-9FH9...

org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta) +8 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-spi-commons (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-spi-commons MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: GHSA-44C3-38H8-9FH9...

org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta) +8 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-spi-commons (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-spi-commons MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: MEND:CVE-2025-53689...

org.apache.struts:struts2-portlet (>=2.1.2, <=2.1.6), org.apache.struts:struts2-showcase (>=2.1.2, <=2.1.6) +18 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (2.5.3)

org.springframework:spring-web MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.struts:struts2-portlet =2.1.2, =2.1.2, =2.1.2, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1,...

org.jasig.service:person-directory (1.0.1), org.jasig:person-directory (1.0.0) +22 more potentially affected by CVE-2022-22968 via org.springframework:spring-context (2.0.3)

org.springframework:spring-context MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.jasig.service:person-directory 1.0.1 - org.jasig:person-directory 1.0.0 -...

org.apache.cxf:apache-cxf (2.0.12), org.apache.cxf:cxf-distribution-manifest (2.0.12) +7 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.0.12)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.cxf:apache-cxf 2.0.12 - org.apache.cxf:cxf-distribution-manifest 2.0.12 -...

Security Bulletin: Potential security vulnerability in IBM WebSphere Application Server in Bluemix MQ JCA Resource adapter (CVE-2016-0360)

Summary There is a potential security vulnerability with the WebSphere Application Server MQ JCA Resource adapter. Vulnerability Details CVEID: CVE-2016-0360 DESCRIPTION: IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources whi...

Security Bulletin: Potential security vulnerability in WebSphere Application Server MQ JCA Resource adapter (CVE-2016-0360)

Summary There is a potential security vulnerability with the WebSphere Application Server MQ JCA Resource adapter. Vulnerability Details CVEID: CVE-2016-0360 DESCRIPTION: IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources whi...

Design/Logic Flaw

In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initialised with DSA parameters, 1.55 and earlier generates a private value assuming a 1024 bit key size...

CVE-2016-1000343

In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initialised with DSA parameters, 1.55 and earlier generates a private value assuming a 1024 bit key size...

PT-2018-4104

Name of the Vulnerable Software and Affected Versions IBM Worklight Consumer and Enterprise Editions versions 5.0.x through 5.0.5 and versions 6.0.x through 6.0.0 before Fix Pack 2 IBM Mobile Foundation Consumer and Enterprise Editions versions 5.0.x through 5.0.5 and version 6.0.0 before Fix Pac...

CVE-2006-1609: Undefined Security Weakness

Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service server process and transfer control process stop when the products "receive data unexpectedly"...