CVE-2022-24252

An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted file...

PT-2022-16565

Name of the Vulnerable Software and Affected Versions Extensis Portfolio version 4.0 Description The issue is related to an unrestricted file upload vulnerability in the FileTransferServlet component, allowing remote attackers to execute arbitrary code via a crafted file. Recommendations For...

PT-2022-4931 · Atlassian · Crowd +6

Name of the Vulnerable Software and Affected Versions: Atlassian Bamboo versions 8.0.0 through 8.0.8 Atlassian Bamboo versions 8.1.0 through 8.1.7 Atlassian Bamboo versions 8.2.0 through 8.2.3 Atlassian Bitbucket versions 7.0.0 through 7.6.15 Atlassian Bitbucket versions 7.7.0 through 7.17.7...

PT-2022-3872 · Atlassian · Crowd +6

Name of the Vulnerable Software and Affected Versions: Atlassian Bamboo versions prior to 8.0.9 Atlassian Bamboo versions 8.1.0 through 8.1.8 Atlassian Bamboo versions 8.2.0 through 8.2.4 Atlassian Bitbucket versions prior to 7.6.16 Atlassian Bitbucket versions 7.7.0 through 7.17.8 Atlassian...

CVE-2021-44550

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java lines 158 and 159...

Stanford CoreNlp 注入漏洞

Stanford CoreNlp is a suite of open source, natural language analysis tools written in Java by the Stanford Nlp Group team. CoreNLP 4.3.2 suffers from an injection vulnerability that originates in classifier in NERServlet.java...

CVE-2021-42853

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API. The affected endpoint does not have any input validation of the user's input that allows a...

CVE-2021-42854

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's DSA PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be...

Low: Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 14 Security Update

An update is now available for Red Hat JBoss Web Server 3.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

io.undertow:undertow-servlet (1.4.2.final), io.undertow:undertow-websockets-jsr (1.4.2.final) +2 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.4.2.final)

io.undertow:undertow-core MAVEN version 1.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.2.final - io.undertow:undertow-websockets-jsr 1.4.2.final -...

io.undertow:undertow-servlet (1.0.0.alpha10), io.undertow:undertow-websockets-jsr (1.0.0.alpha10) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.alpha10)

io.undertow:undertow-core MAVEN version 1.0.0.alpha10 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha10 - io.undertow:undertow-websockets-jsr 1.0.0.alpha10 Source...

io.undertow:undertow-servlet (1.0.0.beta26), io.undertow:undertow-websockets-jsr (1.0.0.beta26) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.beta26)

io.undertow:undertow-core MAVEN version 1.0.0.beta26 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta26 - io.undertow:undertow-websockets-jsr 1.0.0.beta26 Source...

io.undertow:undertow-servlet (1.0.0.alpha3), io.undertow:undertow-websockets-jsr (1.0.0.alpha3) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.alpha3)

io.undertow:undertow-core MAVEN version 1.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha3 - io.undertow:undertow-websockets-jsr 1.0.0.alpha3 Source...

io.undertow:undertow-http2-test-suite (1.3.1.final), io.undertow:undertow-servlet (1.3.1.final) +1 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.3.1.final)

io.undertow:undertow-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.1.final - io.undertow:undertow-servlet 1.3.1.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.0.0.beta31), io.undertow:undertow-websockets-jsr (1.0.0.beta31) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.beta31)

io.undertow:undertow-core MAVEN version 1.0.0.beta31 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta31 - io.undertow:undertow-websockets-jsr 1.0.0.beta31 Source...

io.undertow:undertow-http2-test-suite (1.1.0.beta8), io.undertow:undertow-servlet (1.1.0.beta8) +1 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.1.0.beta8)

io.undertow:undertow-core MAVEN version 1.1.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta8 - io.undertow:undertow-servlet 1.1.0.beta8 -...

io.undertow:undertow-servlet (1.1.0.cr2), io.undertow:undertow-websockets-jsr (1.1.0.cr2) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.1.0.cr2)

io.undertow:undertow-core MAVEN version 1.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr2 - io.undertow:undertow-websockets-jsr 1.1.0.cr2 Source cves:...

io.undertow:undertow-servlet (1.1.0.cr8), io.undertow:undertow-websockets-jsr (1.1.0.cr8) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.1.0.cr8)

io.undertow:undertow-core MAVEN version 1.1.0.cr8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr8 - io.undertow:undertow-websockets-jsr 1.1.0.cr8 Source cves:...

io.inkstand:inkstand-deployment-resteasy (>=0.1.1, <=0.1.2), io.inkstand:inkstand-http-undertow (>=0.1.1, <=0.1.2) +8 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.2.0.beta3)

io.undertow:undertow-core MAVEN version 1.2.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.inkstand:inkstand-deployment-resteasy =0.1.1, =0.1.1, =0.0.1, =0.0.1, =4.0.0, =1.0.0.alpha11,...