ch.squaredesk.nova:metrics-elastic (>=4.0.0-beta-1 <=7.0.2), co.luminositylabs.oss.ica.migration:elasticsearch-loader (=0.2.0) +137 more potentially affected by CVE-2018-3824 via org.elasticsearch:elasticsearch (>=6.0.0 <=6.2.3)

org.elasticsearch:elasticsearch MAVEN version =6.0.0, =4.0.0-beta-1, =6.0.0, =6.1.1.0, =0.1.0-RC9, =5.0.3.9.6, =1.0, =1.2.0-2-ES6.0.0, =1.27.0, =0.217, =0.219, =6.0-7.beta1, =6.0-21.1 and more Source cves: CVE-2018-3824 Source advisory: OSV:GHSA-MJPC-QX7H-R8C9...

be.ordina:microservices-dashboard-server (=1.0.1), br.com.ingenieux:apigateway-maven-plugin (>=1.5.1 <=1.5.6) +1495 more potentially affected by CVE-2015-7501 via org.apache.commons:commons-collections4 (=4.0)

org.apache.commons:commons-collections4 MAVEN version =4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-collections4 and may be impacted: - be.ordina:microservices-dashboard-server =1.0.1 -...

aero.m-click:mcpdf (>=0.2.0 <=0.2.1), at.iem:sysson_2.11 (>=1.13.0 <=1.16.0) +349 more potentially affected by CVE-2017-9096 via com.itextpdf:itextpdf (>=5.0.6 <=5.5.11)

com.itextpdf:itextpdf MAVEN version =5.0.6, =0.2.0, =1.13.0, =1.13.0, =2.0.0, =1.2.1, =3.0.0, =2.0.0, =1.0, =1.1.4, =1.1.4, =1.1.4, =1.1.6 and more Source cves: CVE-2017-9096 Source advisory: OSV:GHSA-86P9-X5PW-94QX...

au.com.dius.pact:au.com.dius.pact.gradle.plugin (>=2.1.1 <=2.1.12), au.com.dius:pact-jvm-consumer-groovy-v3_2.10 (>=2.2.11 <=2.2.15) +1354 more potentially affected by CVE-2013-7398 via com.ning:async-http-client (>=1.0.0 <=1.9.0-BETA6)

com.ning:async-http-client MAVEN version =1.0.0, =2.1.1, =2.2.11, =2.2.11, =2.0.0, =2.0.0, =2.0-RC3, =2.0.0, =2.0.0, =2.0.4, =2.0-RC3, =2.0.0, =1.11, =2.0.0, =2.0.5, =2.0.5, =3.2.1 and more Source cves: CVE-2013-7398 Source advisory: OSV:GHSA-5C66-6H6G-6Q6M...

ai.ancf.lmos:lmos-operator (>=0.5.0 <=0.6.0), ai.berktest:BerkClient (>=1.0.0 <=1.0.3) +13253 more potentially affected by CVE-2016-2402 via com.squareup.okhttp3:okhttp (>=3.0.0 <=3.1.1)

com.squareup.okhttp3:okhttp MAVEN version =3.0.0, =0.5.0, =1.0.0, =0.80.7, =0.80.7, =0.80.7, =0.80.7, =3.24.0.1, =3.32.0.1-2-2.1, =3.32.0.1-2-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.36.0.2-1-2.4 and more Source cves: CVE-2016-2402 Source...

abeja-sdk (>=0.2.0rc1 <=1.1.0rc1), abejacli (>=1.0.2 <=1.0.2rc1) +857 more potentially affected by CVE-2019-11236 via urllib3 (>=1.10.2 <=1.24.2)

urllib3 PYPI version =1.10.2, =0.2.0rc1, =1.0.2, =0.18.0.3, =0.5.0, =0.70.0, =2.0.1, =0.0.1, =0.5.0, =1.1.0rc6, =0.8.0, =0.10.1 and more Source cves: CVE-2019-11236 Source advisory: OSV:GHSA-R64Q-W8JR-G9QP...

com.alibaba:dubbo (>=2.3.0 <=2.5.3), com.apitrary:apitrary-api-client (=0.1) +163 more potentially affected by CVE-2012-5575 via org.apache.cxf:cxf-rt-transports-http (>=2.6.0 <=2.6.6)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.6.0, =2.3.0, =0.0.2, =1.0.0, =1.0.0, =1.0.3, =1.0.M1, =1.0.M1, =1.0.M2, =1.0.0, =1.2.0 and more Source cves: CVE-2012-5575 Source advisory: OSV:GHSA-7V5V-9V8R-W864...

net.gplatform:sudoor-server-lib (>=1.0.4 <=1.0.8), no.difi.sdp:sikker-digital-post-java-klient (>=1.0 <=1.2.0.RC1) +60 more potentially affected by CVE-2014-3623 via org.apache.wss4j:wss4j-ws-security-dom (>=2.0.0 <=2.0.10)

org.apache.wss4j:wss4j-ws-security-dom MAVEN version =2.0.0, =1.0.4, =1.0, =0.9, =0.9, =1.1.9 - org.apache.camel:camel-example-reportincident-wssecurity =2.14.0 - org.apache.cxf.fediz.examples.wsclientWebapp.webservice:fedizservice =1.2.4 - org.apache.cxf.fediz.examples.wsclientWebapp:webapp =1.2...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), com.alibaba:dubbo (>=2.5.4 <=2.6.0) +427 more potentially affected by CVE-2017-12624 via org.apache.cxf:cxf-core (>=3.0.0-milestone1 <=3.0.15)

org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =2.5.4, =2.6.1, =5.4.2, =5.3.0, =0.0.1, =3.0.1, =3.1.2, =0.0.1, =0.6, =0.8 and more Source cves: CVE-2017-12624 Source advisory: OSV:GHSA-7VGJ-8MW4-HG8R...

GHSA-4Q2W-RW7M-XQW6 Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla prior to v1.0.10 relies on the HOME environment variable, which might be untrusted...

Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla prior to v1.0.10 relies on the HOME environment variable, which might be untrusted...

cn.acooly:acooly-auth-wechat-authenticator (=5.2.1), cn.org.thinkcloud:think-cloud-starter-id (=2.0.1.RELEASE) +467 more potentially affected by CVE-2018-8012 via org.apache.zookeeper:zookeeper (>=3.5.0-alpha <=3.5.3-beta)

org.apache.zookeeper:zookeeper MAVEN version =3.5.0-alpha, =3.2.0, =3.0.5, =3.0.5, =0.85, =3.2.0, =3.2.0, =3.3.0-RELEASE, =0.2.2, =0.1.2, =0.2.0, =0.2.1 and more Source cves: CVE-2018-8012 Source advisory: OSV:GHSA-CCQF-C5HQ-77MP...

at.salzburgresearch.nodekeeper:nodekeeper-java (>=1.0 <=1.2), ca.innovativemedicine:vcfimp-solr_2.10 (=0.7.0) +759 more potentially affected by CVE-2018-8012 via org.apache.zookeeper:zookeeper (>=3.3.0 <=3.4.1)

org.apache.zookeeper:zookeeper MAVEN version =3.3.0, =1.0, =0.2, =2.0.0, =1.0.0.RELEASE, =2.0.10, =2.5, =2.5, =2.6.11, =2.6.20, =5.0.1.5, =5.0.2, =6.5.5 - com.boozallen.cognition:cognition-spark-common =0.4.0 and more Source cves: CVE-2018-8012 Source advisory: OSV:GHSA-CCQF-C5HQ-77MP...

com.coveo:saml-client (>=3.0.0 <=4.0.3), com.cybersource:cybersource-sdk-java (>=6.0.1 <=6.1.0) +203 more potentially affected by CVE-2014-8152 via org.apache.santuario:xmlsec (>=2.0.0 <=2.0.2)

org.apache.santuario:xmlsec MAVEN version =2.0.0, =3.0.0, =6.0.1, =0.0.1, =4.0.1 - com.googlecode.xades4j:xades4j =1.3.2 - com.helger:ph-ebinterface =3.1.0 and more Source cves: CVE-2014-8152 Source advisory: OSV:GHSA-W7CQ-J9P9-HM3M...

co.paralleluniverse:galaxy (>=1.1 <=1.2), co.paralleluniverse:quasar-galaxy (=0.2.0) +352 more potentially affected by CVE-2016-2141 via org.jgroups:jgroups (>=3.0.0.CR1 <=3.2.13.Final)

org.jgroups:jgroups MAVEN version =3.0.0.CR1, =1.1, =1.0.0-1, =1.0.7364, =1.0d13, =1.0d18, =1.0d13, =1.0d13, =0.13.1, =0.7.3, =0.8.0, =0.6.0, =1.0.1 and more Source cves: CVE-2016-2141 Source advisory: OSV:GHSA-RC7H-X6CQ-988Q...

Apache Flex BlazeDS unsafe deserialization

Previous versions of Apache Flex BlazeDS 4.7.2 and earlier did not restrict which types were allowed for AMFX object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such...

PyScript - Read Remote Python Source Code Vulnerability

Exploit Title: PyScript Remote Emscripten VMemory Python libraries Source Codes Read Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://pyscript.net/ Software Link: https://github.com/pyscript/pyscript Version: 2022-05-04-Alpha Tested on: Ubuntu Apache Server CVE : CVE-2022-30286...

PyScript 2022-05-04-Alpha Source Code Disclosure

Exploit Title: PyScript Remote Emscripten VMemory Python libraries Source Codes Read Date: 5-9-2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://pyscript.net/ Software Link: https://github.com/pyscript/pyscript Version: 2022-05-04-Alpha Tested on: Ubuntu Apache Server CVE :...

JVN#60037444: Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries

Installer of Trend Micro Password Manager provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use...

The vulnerability of the Libraries component of the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to modify data.

The vulnerability of the Libraries component in the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to modify, add, or delete data using network packet...