CVE-2019-25468

NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the scripttest.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content'...

CVE-2019-25468

NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the scripttest.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content'...

CVE-2019-25468 NetGain EM Plus 10.1.68 Remote Code Execution via script_test.jsp

NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the scripttest.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content'...

com.buschmais.jqassistant.cli:application (>=1.7.0-rc1, <=2.10.0-m4), com.buschmais.jqassistant.cli:jqassistant-commandline-distribution (>=2.0.0-m3, <=2.0.10) +112 more potentially affected by CVE-2026-1524 via org.neo4j.community:it-test-support (>=3.5.0-beta02, <=5.26.21)

org.neo4j.community:it-test-support MAVEN version =3.5.0-beta02, =1.7.0-rc1, =2.0.0-m3, =1.7.0-rc1, =2.1.0-m1, =2.1.0-m1, =1.7.0-rc1, =1.7.0-rc1, =1.12.0-m1, =2.4.0-m1, =1.7.0-rc1, =1.10.0-alpha1, =2.0.0-rc2, =1.7.0-rc1, =1.7.0-rc1, =1.12.0-m1, =2.10.0-m4 and more Source cves: CVE-2026-1524 Sourc...

org.neo4j.gds:doc-test (>=2.18.0, <=2.22.0), org.neo4j.gds:doc-test-tools (>=2.18.0, <=2.22.0) +5 more potentially affected by CVE-2026-1524 via org.neo4j.community:it-test-support (>=2025.01.0, <=2026.01.4)

org.neo4j.community:it-test-support MAVEN version =2025.01.0, =2.18.0, =2.18.0, =2.18.0, =2.18.0, =2.18.0, =2025.01.0, =2025.02.0, =2026.01.4 Source cves: CVE-2026-1524 Source advisory: MEND:CVE-2026-1524...

Apache Tomcat Client Certificate Validation Flaw Vulnerability

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server for the implementation of Servlet and JavaServer Page JSP support. Apache Tomcat client certificate has a validation flaw vulnerability, the vulnerability is due to allow revoked certificate/test...

OpenProject code-related vulnerabilities

OpenProject is an open-source web-based project management software. Versions of OpenProject prior to 17.2.0 had code vulnerabilities. These vulnerabilities stemmed from SMTP test endpoints and Webhooks, which allowed any host and port value to be accepted, potentially leading to internal network...

com.vaadin:vaadin-platform-test (10.0.26) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.26)

com.vaadin:vaadin MAVEN version 10.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.26 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.23) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.23)

com.vaadin:vaadin MAVEN version 10.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.23 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.25) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.25)

com.vaadin:vaadin MAVEN version 10.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.25 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.18) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.18)

com.vaadin:vaadin MAVEN version 10.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.18 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.3), org.rapidpm.vaadin:vaadin-component-login (00.07.04-rpm) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.3)

com.vaadin:vaadin MAVEN version 10.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.3 - org.rapidpm.vaadin:vaadin-component-login 00.07.04-rpm Source cves: CVE-2026-2742...

com.vaadin:vaadin-platform-test (10.0.20) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.20)

com.vaadin:vaadin MAVEN version 10.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.20 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.22) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.22)

com.vaadin:vaadin MAVEN version 10.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.22 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (11.0.4) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (11.0.4)

com.vaadin:vaadin MAVEN version 11.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 11.0.4 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.12) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.12)

com.vaadin:vaadin MAVEN version 10.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.12 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.9), org.rapidpm:rapidpm-vaadin-testbench-ng-m-framework-v10 (>=01.00.00-rpm, <=01.00.01-rpm) +1 more potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.9)

com.vaadin:vaadin MAVEN version 10.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.9 - org.rapidpm:rapidpm-vaadin-testbench-ng-m-framework-v10 =01.00.00-rpm, =01.00.00-rp...

com.vaadin:vaadin-platform-test (10.0.7) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.7)

com.vaadin:vaadin MAVEN version 10.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.7 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.19) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.19)

com.vaadin:vaadin MAVEN version 10.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.19 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (11.0.3) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (11.0.3)

com.vaadin:vaadin MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 11.0.3 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...