CVE-2022-23068

ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitational e-mail...

com.ctlok:spring-webmvc-rythm (>=1.3.6 <=1.4.2), com.github.dblock.waffle:waffle-spring-security3 (>=1.5 <=1.6) +171 more potentially affected by CVE-2012-5055 via org.springframework.security:spring-security-core (>=3.1.0.RELEASE <=3.1.2.RELEASE)

org.springframework.security:spring-security-core MAVEN version =3.1.0.RELEASE, =1.3.6, =1.5, =1.0.0, =3.0.4, =3.3, =1.1.3, =1.1.4, =1.1.3, =1.0.2, =1.0.3 - com.racquettrack:spring-security-oauth2-client =1.4 - com.sitewhere:sitewhere-core =0.9.7 and more Source cves: CVE-2012-5055 Source advisor...

co.paralleluniverse:comsat-actors-undertow (=0.1.0), com.github.wuic:wuic-test (>=0.5.0 <=0.5.2.RC6) +86 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.0.0.Alpha1 <=1.0.16.Final)

io.undertow:undertow-core MAVEN version =1.0.0.Alpha1, =0.5.0, =1.0, =0.4.1, =0.4.1, =1.0.0.CR1, =1.0.0.Alpha1, =1.0.0.Alpha1, =1.0.0.Alpha1, =1.0.0, =0.3.0.CR1, =0.5.0.Final - org.jboss.arquillian.container:shrinkwrap-container-undertow =1.0.0.Alpha2 and more Source cves: CVE-2014-7816 Source...

org.apache.portals.jetspeed-2:app-servers (>=2.1.3 <=2.1.4), org.apache.portals.jetspeed-2:applications (>=2.1.3 <=2.1.4) +35 more potentially affected by CVE-2016-0711 via org.apache.portals.jetspeed-2:jetspeed-commons (>=2.1.3 <=2.3.0)

org.apache.portals.jetspeed-2:jetspeed-commons MAVEN version =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.2.1, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.3.0 and more Source cves: CVE-2016-0711 Source advisory: OSV:GHSA-5PGM-9G57-3WC7...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +923 more potentially affected by CVE-2014-2063 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.532.1.JENKINS-19453)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =2.0.6 - com.cisco.step.jenkins.plugins:jenkow-parent =0.1 and more Source cves: CVE-2014-2063 Source advisory: OSV:GHSA-W3F5-GQ7J-M797...

com.antelink.reporter.jenkins.plugin:AntepediaReporter-CI-plugin (>=1.7 <=1.8), com.dubture.jenkins:digitalocean-plugin (>=0.1 <=0.2) +39 more potentially affected by CVE-2014-2063 via org.jenkins-ci.main:jenkins-core (>=1.533 <=1.550)

org.jenkins-ci.main:jenkins-core MAVEN version =1.533, =1.7, =0.1, =1.53, =1.0.0, =0.1, =1.533, =1.533, =1.533, =1.533, =0.1.3, =0.1.5 and more Source cves: CVE-2014-2063 Source advisory: OSV:GHSA-W3F5-GQ7J-M797...

com.amazonaws:codedeploy (=1.15), com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner (>=1.0.3 <=1.0.5) +332 more potentially affected by CVE-2014-3662 via org.jenkins-ci.main:jenkins-core (>=1.566 <=1.582)

org.jenkins-ci.main:jenkins-core MAVEN version =1.566, =1.0.3, =1.0.0, =2.2.0, =2.0, =8.5.0, =1.2, =1.29, =1.0, =1.0, =1.00, =1.2 and more Source cves: CVE-2014-3662 Source advisory: OSV:GHSA-FXQR-PX2M-FVC2...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1013 more potentially affected by CVE-2014-3666 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.565.2)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =0.9, =1.3, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =2.0.6 and more Source cves: CVE-2014-3666 Source advisory: OSV:GHSA-FVFH-8MJ3-23XJ...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1204 more potentially affected by CVE-2015-1813 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.596.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =0.9, =1.3, =1.0, =1.0.3, =1.0.0, =1.0, =1.0.0, =2.2.0, =1.0-beta-1, =4.18 - com.boxuk.jenkins:jslint =0.7.4 and more Source cves: CVE-2015-1813 Source advisory: OSV:GHSA-9H85-V6XF-H26Q...

com.github.yujiaao:jmesa (>=4.0.1 <=4.1.3), com.microsoft.azure:applicationinsights-web (>=0.9.2 <=2.4.0-BETA) +23 more potentially affected by CVE-2008-6504 via com.opensymphony:xwork (>=2.0.4 <=2.0.5)

com.opensymphony:xwork MAVEN version =2.0.4, =4.0.1, =0.9.2, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.9, =2.0.11.2 and more Source cves: CVE-2008-6504 Source advisory: OSV:GHSA-WXW2-2MX5-C5QF...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1186 more potentially affected by CVE-2014-9635 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.585)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =0.9, =1.3, =1.0, =1.0.3, =1.0.0, =1.0, =1.0.0, =2.2.0, =1.0-beta-1, =4.18 - com.boxuk.jenkins:jslint =0.7.4 and more Source cves: CVE-2014-9635 Source advisory: OSV:GHSA-7F6W-FHMR-J8HQ...

ae.teletronics.nlp:entityextraction (=1.3), at.researchstudio.sat:won-matcher-rescal (>=0.3 <=0.6) +542 more potentially affected by CVE-2017-12620 via org.apache.opennlp:opennlp-tools (>=1.5.2-incubating <=1.8.1)

org.apache.opennlp:opennlp-tools MAVEN version =1.5.2-incubating, =0.3, =0.2, =3.6.1, =3.11.0, =2.0.0, =2.0.0, =1.1, =0.3, =0.2, =0.6, =0.8 - com.blazemeter:jmeter-plugins-rotating-listener =0.2 - com.centit.support:centit-es-client =0.1.1806 and more Source cves: CVE-2017-12620 Source advisory:...

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A resource management error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which stems from a use-after-release error in AppleAVD. An attacker could exploit the vulnerability to elevate privileges on the system v...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A buffer error vulnerability exists in Apple macOS versions 10.15 19A583 through 10.15.7 19H1823, which stems from a boundary error in the Wi-Fi component. A native application...

Apple macOS Monterey 输入验证错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in Apple macOS Monterey versions 12.0 21A344 through 12.3.1 21E258, which stems from insufficient validation of user-supplied input in libresolv. A...

Apple macOS 缓冲区错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A buffer error vulnerability exists in Apple macOS versions 12.0 21A344 through 12.3.1 21E258, which stems from a boundary error in the Intel Graphics Driver. A local user can trigger memor...

Cybozu Garoon 输入验证错误漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An input validation error vulnerability exists in the Space component of Cybozu Garoon versions 4.0.0 to 5.5.1. An authenticated...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1524 more potentially affected by CVE-2016-0790 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.649)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.5.0, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2016-0790 Source advisory: OSV:GHSA-JGPR-QRW2-6GP3...

com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9 <=4.1.0), org.jenkins-ci.lib:xtrigger-lib (=0.36) +13 more potentially affected by CVE-2016-0788 via org.jenkins-ci.main:jenkins-core (>=1.643 <=1.649)

org.jenkins-ci.main:jenkins-core MAVEN version =1.643, =4.0.9, =1.643, =1.643, =1.645, =0.5, =1.648, =4.0.4, =1.0.0, =1.643, =1.0.45, =0.3.2, =0.3.8 - org.jenkins.plugins.statistics.gatherer:statistics-gatherer =1.0.1 Source cves: CVE-2016-0788 Source advisory: OSV:GHSA-J7Q5-H445-F7PC...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1524 more potentially affected by CVE-2016-0791 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.649)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.5.0, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2016-0791 Source advisory: OSV:GHSA-JMW7-PH6P-33CC...