EUVD-2022-34719

Malicious code in bioql PyPI...

EUVD-2022-4792

Malicious code in bioql PyPI...

org.drools:drools-wb-drl-extension-server (>=7.74.0.final, <=7.74.1.final), org.drools:drools-wb-drl-text-editor-backend (7.74.0.final) +30 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.15.16.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.15.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.drools:drools-wb-drl-extension-server =7.74.0.final...

Business-central: Possible XML External Entity Injection attack

An XML external entity injectionXXE vulnerability was found in Business Central. This flaw allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. T...

CVE-2022-2458

XML external entity injectionXXE is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML...

CVE-2022-2458

XML external entity injectionXXE is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML...

CVE-2022-2458

XML external entity injectionXXE is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML...

Xxe

XML external entity injectionXXE is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML...

CVE-2022-2458

CVE-2022-2458 is an XML External Entity (XXE) vulnerability affecting IBM Business Automation Manager/Open Editions (Business Central) and Kie-Server APIs. The weakness arises from processing XML input with external entities due to a weakly configured XML parser, enabling an attacker to cause Ext...

CVE-2022-2458

XML external entity injectionXXE is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML...

CVE-2022-2458: XML Injection (aka Blind XPath Injection)

XML external entity injectionXXE is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML...

CVE-2022-2458

An XML external entity injectionXXE vulnerability was found in Business Central. This flaw allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. T...

GHSA-PJW3-C74J-M9FJ Password in config file in KIE server

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services...

Password in config file in KIE server

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services...

org.apache.camel:camel-jbpm (>=2.23.0, <=3.0.0-m2), org.apache.camel:camel-jbpm-starter (>=2.23.0, <=3.0.0-m2) +119 more potentially affected by CVE-2016-7043 via org.kie.server:kie-server-common (>=7.0.0.beta3, <=7.20.0.final)

org.kie.server:kie-server-common MAVEN version =7.0.0.beta3, =2.23.0, =2.23.0, =7.14.0.final, =7.16.0.final, =7.3.0.final, =7.3.0.final, =5.0.1, =7.3.0.final, =7.3.0.final, =7.3.0.final, =7.3.0.final, =7.0.0.beta3, =7.0.0.beta5 and more Source cves: CVE-2016-7043 Source advisory:...

org.apache.camel:camel-jbpm (>=2.23.0, <=3.0.0-m2), org.apache.camel:camel-jbpm-starter (>=2.23.0, <=3.0.0-m2) +119 more potentially affected by CVE-2016-7043 via org.kie.server:kie-server-common (>=7.0.0.beta3, <=7.20.0.final)

org.kie.server:kie-server-common MAVEN version =7.0.0.beta3, =2.23.0, =2.23.0, =7.14.0.final, =7.16.0.final, =7.3.0.final, =7.3.0.final, =5.0.1, =7.3.0.final, =7.3.0.final, =7.3.0.final, =7.3.0.final, =7.0.0.beta3, =7.0.0.beta5 and more Source cves: CVE-2016-7043 Source advisory: GHSA-PJW3-C74J-M...

com.gitblit.fathom:fathom-integration-test (>=0.5.2, <=0.6.0), com.gitblit.fathom:fathom-rest-swagger (>=0.5.2, <=0.6.0) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (2.1.0)

org.webjars:swagger-ui MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.gitblit.fathom:fathom-integration-test =0.5.2, =0.5.2, =7.11.0.final, =7.34.0.final Source cves: CVE-2018-25031...

CVE-2016-7043

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services...

CVE-2016-7043

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services...

CVE-2016-7043

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services...