com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +12 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (8.5.83)

org.apache.tomcat:tomcat-util MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-util and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =17.0.0.final, =17.0.0.final, =17.0.1.final...

com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +12 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (8.5.83)

org.apache.tomcat:tomcat-util MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-util and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =17.0.0.final, =17.0.0.final, =17.0.1.final...

be.dabla:grizzly-spring-boot-jasper (>=2.4, <=2.7), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +162 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (>=9.0.40, <=9.0.68)

org.apache.tomcat:tomcat-util MAVEN version =9.0.40, =2.4, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.0.11, =5.9.6, =3.3.7, =1.7.0, =6.35, =6.39 and more Source cves: CVE-2022-45143 Source advisory: OSV:GHSA-RQ2W-37H9-VG94...

be.dabla:grizzly-spring-boot-jasper (>=2.4, <=2.7), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +162 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (>=9.0.40, <=9.0.68)

org.apache.tomcat:tomcat-util MAVEN version =9.0.40, =2.4, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.0.11, =5.9.6, =3.3.7, =1.7.0, =6.35, =6.39 and more Source cves: CVE-2022-45143 Source advisory: GHSA-RQ2W-37H9-VG94...

com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +12 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (8.5.83)

org.apache.tomcat:tomcat-util MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-util and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =17.0.0.final, =17.0.0.final, =17.0.1.final...

be.dabla:grizzly-spring-boot-jasper (>=2.4, <=2.7), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +162 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (>=9.0.40, <=9.0.68)

org.apache.tomcat:tomcat-util MAVEN version =9.0.40, =2.4, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.0.11, =5.9.6, =3.3.7, =1.7.0, =6.35, =6.39 and more Source cves: CVE-2022-45143 Source advisory: MEND:CVE-2022-45143...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5339469178077184 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5397368558452736 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

CVE-2020-36634 Indeed Engineering util ViewExportedVariablesServlet.java appendTo cross site scripting

A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is...

CVE-2020-36634

A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is...

CVE-2020-36634

This CVE (CVE-2020-36634) affects Indeed Engineering util up to version 1.0.33. The vulnerability resides in the function visit/appendTo of varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java, where input is mishandled and leads to cross-site scripting. It ...

CVE-2020-36634: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is...

CVE-2022-42930

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5347401462579200 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

cn.hutool:hutool-dfa (4.5.9), cn.hutool:hutool-http (4.5.9) +2 more potentially affected by CVE-2022-45688 via cn.hutool:hutool-json (4.5.9)

cn.hutool:hutool-json MAVEN version 4.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.9 - cn.hutool:hutool-http 4.5.9 - cn.virens:virens-oauth2 1.3.7 - cn.virens:virens-util 1.3....

cn.hutool:hutool-dfa (4.3.1), cn.hutool:hutool-http (4.3.1) +2 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.3.1)

cn.hutool:hutool-json MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.3.1 - cn.hutool:hutool-http 4.3.1 - cn.virens:virens-oauth2 1.3.5 - cn.virens:virens-util 1.3....

cn.hutool:hutool-dfa (4.0.12), cn.hutool:hutool-http (4.0.12) +1 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.0.12)

cn.hutool:hutool-json MAVEN version 4.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.12 - cn.hutool:hutool-http 4.0.12 - cn.virens:virens-util =1.1.2, =1.2.1 Source cves:...

cn.hutool:hutool-dfa (4.1.8), cn.hutool:hutool-http (4.1.8) +5 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.8)

cn.hutool:hutool-json MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.8 - cn.hutool:hutool-http 4.1.8 - cn.virens:virens-util 1.2.3 - com.zyplayer:swagger-mg-ui...

cn.hutool:hutool-dfa (4.0.7), cn.hutool:hutool-http (4.0.7) +1 more potentially affected by CVE-2022-45688 via cn.hutool:hutool-json (4.0.7)

cn.hutool:hutool-json MAVEN version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.7 - cn.hutool:hutool-http 4.0.7 - cn.virens:virens-util =1.0.2, =1.0.6 Source cves:...

cn.hutool:hutool-dfa (4.0.9), cn.hutool:hutool-http (4.0.9) +2 more potentially affected by CVE-2022-45688 via cn.hutool:hutool-json (4.0.9)

cn.hutool:hutool-json MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.9 - cn.hutool:hutool-http 4.0.9 - cn.virens:virens-util =1.0.7, =1.1.1 -...