com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (3.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...

com.github.springbootplus:spring-boot-starter-allinone (2.0.1.release), com.malliina:mobile-push_2.12 (>=1.12.2, <=1.12.4) +7 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (5.9)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.springbootplus:spring-boot-starter-allinone 2.0.1.release - com.malliina:mobile-push2.12...

XSS Vulnerability in Huaxia ERP System

Huaxia ERP based on the SpringBoot framework , SaaS model , aspires to provide small and medium-sized enterprises with open source good ERP software , currently focusing on sales and inventory + financial functions . Huaxia ERP system has an XSS vulnerability that can be exploited by attackers to...

io.undertow:undertow-websockets-jsr (1.1.9.final), org.springframework.boot:spring-boot-starter-undertow (1.2.8.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.9.final)

io.undertow:undertow-servlet MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.baidubce.formula:launcher-spring-boot-starter (>=1.3.2.0, <=2.1.1.1), io.atlasmap:atlasmap-standalone (>=1.39.0, <=1.42.10) +27 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.4.26.final)

io.undertow:undertow-servlet MAVEN version 1.4.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - com.baidubce.formula:launcher-spring-boot-starter =1.3.2.0, =1.39.0, =0.10.0.release,...

io.undertow:undertow-websockets-jsr (1.3.18.final), org.springframework.boot:spring-boot-starter-undertow (1.3.3.release) +1 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.3.18.final)

io.undertow:undertow-servlet MAVEN version 1.3.18.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.3.18.final -...

io.undertow:undertow-websockets-jsr (1.3.28.final), org.springframework.boot:spring-boot-starter-undertow (>=1.4.6.release, <=1.4.7.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.3.28.final)

io.undertow:undertow-servlet MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-websockets-jsr (1.1.7.final), org.springframework.boot:spring-boot-starter-undertow (1.2.5.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.7.final)

io.undertow:undertow-servlet MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.1.7.final -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12), ai.grakn:grakn (>=0.17.0, <=0.18.0) +14590 more potentially affected by CVE-2019-14379 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.11.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2019-14379 Source advisory: MEND:CVE-2019-14379...

CVE-2019-9186

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces instead of listening on only the localhost interface. This issue has bee...

CVE-2019-9186

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces instead of listening on only the localhost interface. This issue has bee...

CVE-2019-9186

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces instead of listening on only the localhost interface. This issue has bee...

UBUNTU-CVE-2019-9186

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces instead of listening on only the localhost interface. This issue has bee...

Default configuration

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces instead of listening on only the localhost interface. This issue has bee...

CVE-2019-9186

In JetBrains IntelliJ IDEA, the Spring Boot run configuration could allow remote code execution because a JMX server listened on all network interfaces instead of only localhost. Affected versions were fixed in 2019.1, 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7. The CVE is CVE-2019-9186. Public d...

CVE-2019-9186

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces instead of listening on only the localhost interface. This issue has bee...

PT-2019-19423

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2019.1 JetBrains IntelliJ IDEA versions prior to 2018.3.4 JetBrains IntelliJ IDEA versions prior to 2018.2.8 JetBrains IntelliJ IDEA versions prior to 2018.1.8 JetBrains IntelliJ IDEA versions prior to...