CVE-2021-32683

wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is instructed to open an image in a new tab right click - open in new tab, or copy the URL and paste it in the URL bar, ...

CVE-2021-32683: Improper Neutralization of Input During Web Page Generation

wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is instructed to open an image in a new tab right click - open in new tab, or copy the URL and paste it in the URL bar, ...

Wire 跨站脚本漏洞

Wire is a chat software by an individual developer. The program supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos, and its original way of saying hello, PING. A cross-site scripting vulnerability exists in wire-webapp, which can be...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc4), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc4) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.rc4)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc4 -...

org.eclipse.jetty.aggregate:jetty-all (8.0.0.m0), org.eclipse.jetty.aggregate:jetty-all-server (8.0.0.m0) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.0.0.m0)

org.eclipse.jetty:jetty-servlets MAVEN version 8.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.0.0.m0 - org.eclipse.jetty.aggregate:jetty-all-serve...

org.eclipse.jetty.aggregate:jetty-all (7.1.1.v20100517), org.eclipse.jetty.aggregate:jetty-all-server (7.1.1.v20100517) +2 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.1.1.v20100517)

org.eclipse.jetty:jetty-servlets MAVEN version 7.1.1.v20100517 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.1.v20100517 -...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc0) +2 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.1.0.rc0)

org.eclipse.jetty:jetty-servlets MAVEN version 7.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc0 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.m3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.m3) +1 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.m3)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.m3 - org.eclipse.jetty.aggregate:jetty-all-serve...

org.eclipse.jetty:jetty-test-webapp (7.0.0.m0) potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.m0)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty:jetty-test-webapp 7.0.0.m0 Source cves: CVE-2021-28169 Source advisory:...

org.eclipse.jetty.aggregate:jetty-all (7.0.2.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.0.2.rc0) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.2.rc0)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.2.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.2.rc0 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.rc3)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc1) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.rc1)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc1 -...

org.eclipse.jetty:jetty-test-webapp (7.0.0.m1) potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.m1)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty:jetty-test-webapp 7.0.0.m1 Source cves: CVE-2021-28169 Source advisory:...

CVE-2021-33894

In Progress MOVEit Transfer before 2019.0.6 11.0.6, 2019.1.x before 2019.1.5 11.1.5, 2019.2.x before 2019.2.2 11.2.2, 2020.x before 2020.0.5 12.0.5, 2020.1.x before 2020.1.4 12.1.4, and 2021.x before 2021.0.1 13.0.1, a SQL injection vulnerability exists in SILUtility.vb in MOVEit.DMZ.WebApp in th...

org.glassfish.jersey.bundles.glassfish.v4_0:jersey-gfv4_0-core (2.0-rc1), org.glassfish.jersey.examples:bean-validation-webapp (2.0-rc1) +1 more potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (5.0.0.cr4)

org.hibernate:hibernate-validator MAVEN version 5.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.glassfish.jersey.bundles.glassfish.v40:jersey-gfv40-core 2.0-rc1 -...

Apache Tapestry Information Disclosure (CVE-2021-30638)

An information disclosure vulnerability exists in Apache Tapestry. A URL manipulation via smuggled backslashes allows Java webapp files inside WEB-INF to be listed and downloaded...

com.github.avarabyeu.jashing.extensions:jashing-cvs (>=0.0.9, <=0.0.16), com.github.avarabyeu.jashing.extensions:jashing-git (>=0.0.9, <=0.0.16) +11 more potentially affected by CVE-2021-23369 via org.webjars:handlebars (3.0.3)

org.webjars:handlebars MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:handlebars and may be impacted: - com.github.avarabyeu.jashing.extensions:jashing-cvs =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0.9, =0.4.1, =1.7.9...

Remote Code Execution

libraw is vulnerable to remote code execution. An authenticated user can inject additional commands into normal webapp query...

Information Disclosure

tapestry-core is vulnerable to information disclosure. Mishandling of URL allows an attacker to use malicious URL to list and download the JAVA webapp files from WEB-INF of the WAR being run. This CVE exists due to an incomplete fix for CVE-2020-13953...

com.aspectran:aspectran-all (6.13.0), com.aspectran:aspectran-with-jetty (6.13.0) +322 more potentially affected by CVE-2021-28164 via org.eclipse.jetty:jetty-webapp (>=9.4.37.v20210219, <=9.4.38.v20210224)

org.eclipse.jetty:jetty-webapp MAVEN version =9.4.37.v20210219, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =1.7.0, =1.18.1860, =8.13.0, =8.13.0, =8.13.0, =8.13.1 and more Source cves: CVE-2021-28164 Source advisory: GHSA-V7FF-8WCX-GMC5...