br.uff.sti:jersey-mvc-jasper (0.2), com.nablarch.report:nablarch-report (1.1.0) +1 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (5.6.1)

net.sf.jasperreports:jasperreports MAVEN version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.uff.sti:jersey-mvc-jasper 0.2 - com.nablarch.report:nablarch-report 1.1.0 -...

EUVD-2019-15487

Malware in sbrugna...

EUVD-2022-4180

Malicious code in bioql PyPI...

br.uff.sti:jersey-mvc-jasper (0.2), com.nablarch.report:nablarch-report (1.1.0) +1 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (5.6.1)

net.sf.jasperreports:jasperreports MAVEN version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.uff.sti:jersey-mvc-jasper 0.2 - com.nablarch.report:nablarch-report 1.1.0 -...

GHSA-HMX6-GC2P-5P82 Nablarch Incomplete Cryptography

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

Nablarch Incomplete Cryptography

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

com.nablarch.configuration:nablarch-testing-default-configuration (1.1.0), com.nablarch.framework:nablarch-backward-compatibility (1.1.0) +15 more potentially affected by CVE-2019-5919 via com.nablarch.framework:nablarch-fw-web (>=1.2.2, <=1.5.0)

com.nablarch.framework:nablarch-fw-web MAVEN version =1.2.2, =1.0.1, =1.0.1, =1.0.3, =1.0.3, =1.0.6, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =5u6, =5u13 and more Source cves: CVE-2019-5919 Source advisory: GHSA-HMX6-GC2P-5P82...

com.nablarch.configuration:nablarch-testing-default-configuration (1.1.0), com.nablarch.framework:nablarch-backward-compatibility (1.1.0) +15 more potentially affected by CVE-2019-5919 via com.nablarch.framework:nablarch-fw-web (>=1.2.2, <=1.5.0)

com.nablarch.framework:nablarch-fw-web MAVEN version =1.2.2, =1.0.1, =1.0.1, =1.0.3, =1.0.3, =1.0.6, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =5u6, =5u13 and more Source cves: CVE-2019-5919 Source advisory: OSV:GHSA-HMX6-GC2P-5P82...

Information Disclosure

nablarch-fw-web is vulnerable to information disclosure. Remote attackers are able to obtain information regarding stored data, register or modify invalid values due to incomplete cryptography of the data store function...

XML External Entity (XXE)

nablarch is vulnerable to XML external entity XXE attacks. Lack of validation and permitting of external DTDs in XML submissions allows an attacker to perform XXE attacks...

CVE-2019-5918

Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to conduct XML External Entity XXE attacks via unspecified vectors...

Design/Logic Flaw

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

CVE-2019-5918

Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to conduct XML External Entity XXE attacks via unspecified vectors...

CVE-2019-5919

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

Xxe

Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to conduct XML External Entity XXE attacks via unspecified vectors...

CVE-2019-5919

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

CVE-2019-5919

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...

CVE-2019-5919

CVE-2019-5919 affects Nablarch 5 (including 5, 5u1–5u13). The vulnerability is an incomplete cryptography of the data store function caused by a hidden tag, enabling remote attackers to obtain information about stored data, register invalid values, or alter values via unspecified vectors. The iss...

CVE-2019-5918

Affected software: Nablarch 5 (5, and 5u1 to 5u13). Vulnerability: XML External Entity (XXE) attacks due to lack of XML validation/external DTD handling (CWE-611). Impact: remote attacker could cause information leakage or system shutdown. Root cause (as stated): XXE in the generic formatter func...

CVE-2019-5919

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors...