be.objectify:deadbolt-java_2.13 (=2.8.0), be.objectify:deadbolt-scala_2.13 (=2.8.0) +488 more potentially affected by CVE-2021-42697 via com.typesafe.akka:akka-http-core_2.13 (>=10.1.10 <=10.1.14)

com.typesafe.akka:akka-http-core2.13 MAVEN version =10.1.10, =0.1.2, =0.1.2, =0.2.0, =0.1.2, =0.1.2, =0.1.2, =0.1.2, =0.2.0, =0.1.2, =0.1.2, =0.4.0, =0.4.0, =0.4.0, =0.5.1 and more Source cves: CVE-2021-42697 Source advisory: OSV:GHSA-3HW2-H67C-WQ66...

CVE-2014-125001

A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended...

Remote code execution

A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended...

CVE-2014-125001 Cardo Systems Scala Rider Q3 Cardo-Updater api privileges management

A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended...

CVE-2014-125001

CVE-2014-125001 concerns Cardo Systems Scala Rider Q3. The vulnerability affects the Cardo-Updater component, specifically the "/cardo/api" file, enabling unauthenticated remote code execution with root privileges. Impact is described as complete compromise of confidentiality, integrity, and avai...

Cardo Systems Scala Rider Q3 安全漏洞

Cardo Systems Scala Rider Q3 is a new Bluetooth headset from Cardo by Cardo Systems. A security vulnerability exists in Cardo Systems Scala Rider Q3, which can be exploited by an attacker to execute unauthenticated remote code using root privileges...

cc.co.scala-reactive:reactive-web_2.8.1 (=0.1), com.fmpwizard:lift-named-comet_2.8.1 (=0.3) +32 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.1 (>=2.2 <=2.4-RC1)

net.liftweb:lift-webkit2.8.1 MAVEN version =2.2, =1.0.6, =0.0.3, =0.0.3, =2.2-RC1, =2.2-RC1, =2.2-RC1, =2.2-RC1, =2.2, =2.2-RC1, =2.2, =2.2-RC1, =2.2-RC1, =2.2-RC5 and more Source cves: CVE-2013-3300 Source advisory: OSV:GHSA-JF9V-FXFQ-WM76...

GHSA-9PXM-8G95-Q5XR Insufficient Data Verification in io.really:jwt-scala

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token...

Insufficient Data Verification in io.really:jwt-scala

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token...

CVE-2022-28355

CVE-2022-28355 concerns Scala.js prior to 1.10.0, where randomUUID generates predictable values due to insecure encryption in the randomUUID implementation. The vulnerability affects Scala.js’s code generation/runtime relying on UUID generation. The publicly documented fix is to upgrade to Scala....

com.codacy:codacy-seed-client-akka-http_2.11 (>=1.1.0-master.51.7b7549c_akka25Circe08 <=1.2.0_akka25Circe08), com.softwaremill.akka-http-session:jwt_2.11 (>=0.2.0 <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.11 (>=0.2.0 <=0.5.10)

com.softwaremill.akka-http-session:core2.11 MAVEN version =0.2.0, =1.1.0-master.51.7b7549cakka25Circe08, =0.2.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: OSV:GHSA-Q42Q-523G-3FWV...

com.busymachines:pureharm-json-circe_2.13.0-RC2 (=0.0.2-M13), io.circe:circe-jawn_2.13.0-RC2 (=0.12.0-M2) +5 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.13.0-RC2 (=0.14.2)

org.typelevel:jawn-parser2.13.0-RC2 MAVEN version =0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser2.13.0-RC2 and may be impacted: - com.busymachines:pureharm-json-circe2.13.0-RC2 =0.0.2-M13 - io.circe:circe-jawn2.13.0-R...

org.typelevel:jawn-argonaut_2.10 (>=0.14.0 <=0.14.1), org.typelevel:jawn-ast_2.10 (>=0.14.0 <=0.14.1) +6 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.10 (>=0.14.0 <=0.14.1)

org.typelevel:jawn-parser2.10 MAVEN version =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.1 Source cves: CVE-2022-21653 Source advisory: OSV:GHSA-VC89-HCCF-RQ55...

ai.eto:rikai_2.12 (>=0.0.3 <=0.1.7), ai.mantik:bridge-protocol_2.12 (>=0.3.0 <=0.3.1-rc2) +1286 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.12 (>=0.14.0 <=1.3.1)

org.typelevel:jawn-parser2.12 MAVEN version =0.14.0, =0.0.3, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.1-rc2 and more Source cves: CVE-2022-21653 Source advisory: OSV:GHSA-VC89-HCCF-RQ55...

org.typelevel:jawn-ast_2.11 (>=1.0.0-RC1 <=1.0.0-RC2), org.typelevel:jawn-json4s_2.11 (>=1.0.0-RC1 <=1.0.0-RC2) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.11 (>=1.0.0-RC1 <=1.0.0-RC2)

org.typelevel:jawn-parser2.11 MAVEN version =1.0.0-RC1, =1.0.0-RC1, =1.0.0-RC1, =1.0.0-RC1, =1.0.0-RC1, =1.0.0-RC1, =1.0.0-RC2 Source cves: CVE-2022-21653 Source advisory: OSV:GHSA-VC89-HCCF-RQ55...

com.github.xuwei-k:msgpack4z-jawn_2.13.0-M5 (=0.4.0), com.lihaoyi:ujson-circe_2.13.0-M5 (>=0.7.3 <=0.7.4) +25 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.13.0-M5 (>=0.14.0 <=0.14.1)

org.typelevel:jawn-parser2.13.0-M5 MAVEN version =0.14.0, =0.7.3, =2.1.0, =0.6.0, =0.11.0, =0.11.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0-M2, =0.5.0-M2, =0.20.0, =0.20.0, =0.20.10 and more Source cves: CVE-2022-21653 Source advisory: OSV:GHSA-VC89-HCCF-RQ55...

com.akolov:doorman-core_2.12 (=0.0.5), com.akolov:doorman_2.12 (>=0.3.0 <=0.4.0) +150 more potentially affected by CVE-2021-41084 via org.http4s:http4s-server_2.12 (>=0.10.0-M10 <=0.21.28)

org.http4s:http4s-server2.12 MAVEN version =0.10.0-M10, =0.3.0, =0.18.3, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.0.16, =0.0.13, =0.0.13, =0.0.13, =0.0.42 and more Source cves: CVE-2021-41084 Source advisory: OSV:GHSA-5VCM-3XC3-W7X3...

ch.epfl.bluebrain.nexus:cli_2.13 (>=1.5.0 <=1.6.1), com.47deg:github4s_2.13 (>=0.22.0 <=0.28.5) +132 more potentially affected by CVE-2021-41084 via org.http4s:http4s-client_2.13 (>=0.10.0-M10 <=0.21.28)

org.http4s:http4s-client2.13 MAVEN version =0.10.0-M10, =1.5.0, =0.22.0, =0.2.0, =0.2.0, =0.1.0, =1.3.1, =0.1.21, =0.1.21, =0.1.21, =0.1.21, =0.1.21, =6.0.0, =0.0.38, =0.0.38, =0.0.38, =0.0.42 and more Source cves: CVE-2021-41084 Source advisory: OSV:GHSA-5VCM-3XC3-W7X3...

com.alejandrohdezma:http4s-munit-testcontainers_2.13 (=0.8.0), com.alejandrohdezma:http4s-munit_2.13 (=0.8.0) +54 more potentially affected by CVE-2021-41084 via org.http4s:http4s-client_2.13 (>=0.22.0 <=0.22.4)

org.http4s:http4s-client2.13 MAVEN version =0.22.0, =2.0.0, =0.12.0, =0.17.0, =0.12.0, =0.17.0, =0.12.0, =0.12.0, =0.17.0, =0.17.0, =0.12.0, =0.17.0-11-3359289, =0.17.0, =0.17.1 and more Source cves: CVE-2021-41084 Source advisory: OSV:GHSA-5VCM-3XC3-W7X3...

com.47deg:github4s_2.12 (>=0.29.1 <=0.33.3), com.47deg:github4s_sjs1_2.12 (>=0.31.0 <=0.33.3) +142 more potentially affected by CVE-2021-41084 via org.http4s:http4s-client_2.12 (>=0.23.0 <=0.23.34)

org.http4s:http4s-client2.12 MAVEN version =0.23.0, =0.29.1, =0.31.0, =0.9.4, =9.0.0, =0.0.1, =0.17.0, =0.12.1, =0.12.1, =0.12.1, =4.0.0-M15, =4.0.0-M16 and more Source cves: CVE-2021-41084 Source advisory: OSV:GHSA-5VCM-3XC3-W7X3...