org.grails:grails-crud (1.3.0), org.grails:grails-gorm (1.3.0) +3 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.3.0)

org.grails:grails-core MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.3.0 - org.grails:grails-gorm 1.3.0 - org.grails:grails-scripts 1.3.0 - org.grails:grails-w...

org.grails:grails-crud (1.3.1), org.grails:grails-gorm (1.3.1) +3 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.3.1)

org.grails:grails-core MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.3.1 - org.grails:grails-gorm 1.3.1 - org.grails:grails-scripts 1.3.1 - org.grails:grails-w...

org.grails:grails-crud (1.2.4), org.grails:grails-gorm (1.2.4) +3 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.2.4)

org.grails:grails-core MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.4 - org.grails:grails-gorm 1.2.4 - org.grails:grails-scripts 1.2.4 - org.grails:grails-w...

org.grails:grails-crud (1.2.1), org.grails:grails-gorm (1.2.1) +4 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.2.1)

org.grails:grails-core MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.1 - org.grails:grails-gorm 1.2.1 - org.grails:grails-maven-plugin 1.2.1 -...

org.grails:grails-crud (1.3.5), org.grails:grails-gorm (1.3.5) +3 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.3.5)

org.grails:grails-core MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.3.5 - org.grails:grails-gorm 1.3.5 - org.grails:grails-scripts 1.3.5 - org.grails:grails-w...

com.google.code.struts2webflow:struts2webflow-parent (1.0.4), com.google.code.struts2webflow:struts2webflow-plugin (1.0.4) +24 more potentially affected by CVE-2008-6505 via org.apache.struts:struts2-core (>=2.0.5, <=2.0.11.2)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.11.2 and more Source cves: CVE-2008-6505 Source advisory: GHSA-WV7G-XHVW-8HCP...

com.github.gfernandez598:springwebflow-optforrepl (1.0), com.github.stephanarts:cas-server-integration-zeromq (>=0.0.1, <=0.0.8) +443 more potentially affected by CVE-2017-8039 via org.springframework.webflow:spring-webflow (>=2.0.6.release, <=2.4.5.release)

org.springframework.webflow:spring-webflow MAVEN version =2.0.6.release, =0.0.1, =1.0, =1.0.0.release, =1.0, =1.0, =1.0.0.rc1, =1.0.0-m2, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-ga and more Source cves: CVE-2017-8039 Source advisory: GHSA-Q4V9-QJMW-J7VF...

com.github.gfernandez598:springwebflow-optforrepl (1.0), com.github.stephanarts:cas-server-integration-zeromq (>=0.0.1, <=0.0.8) +443 more potentially affected by CVE-2017-8039 via org.springframework.webflow:spring-webflow (>=2.0.6.release, <=2.4.5.release)

org.springframework.webflow:spring-webflow MAVEN version =2.0.6.release, =0.0.1, =1.0, =1.0.0.release, =1.0, =1.0, =1.0.0.rc1, =1.0.0-m2, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-ga and more Source cves: CVE-2017-8039 Source advisory: OSV:GHSA-Q4V9-QJMW-J7VF...

com.github.gfernandez598:springwebflow-optforrepl (1.0), fr.natsystem.natjet:natsys-nsworkflow (7.0.19) +295 more potentially affected by CVE-2017-4971 via org.springframework.webflow:spring-webflow (>=2.4.0.release, <=2.4.4.release)

org.springframework.webflow:spring-webflow MAVEN version =2.4.0.release, =1.0.0.release, =1.0, =1.0, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =5.0.0.m1, =5.0.0.m1, =5.1.9 and more Source cves: CVE-2017-4971 Source advisory: OSV:GHSA-FG9W-CFFM-PMH2...

com.github.gfernandez598:springwebflow-optforrepl (1.0), fr.natsystem.natjet:natsys-nsworkflow (7.0.19) +295 more potentially affected by CVE-2017-4971 via org.springframework.webflow:spring-webflow (>=2.4.0.release, <=2.4.4.release)

org.springframework.webflow:spring-webflow MAVEN version =2.4.0.release, =1.0.0.release, =1.0, =1.0, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =5.0.0.m1, =5.0.0.m1, =5.1.9 and more Source cves: CVE-2017-4971 Source advisory: GHSA-FG9W-CFFM-PMH2...

org.acegisecurity:acegi-security (1.0.4), org.acegisecurity:acegi-security-adapters (1.0.4) +14 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0.4)

org.springframework:spring-web MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security 1.0.4 - org.acegisecurity:acegi-security-adapters 1.0.4 -...

org.acegisecurity:acegi-security (1.0.4), org.acegisecurity:acegi-security-adapters (1.0.4) +14 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (2.0.4)

org.springframework:spring-web MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security 1.0.4 - org.acegisecurity:acegi-security-adapters 1.0.4 -...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +125 more potentially affected by CVE-2011-3923 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.1.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.2.0, =1.0.3, =0.6, =3.0-rc2, =5.0.1 - com.google.inject.extensions:guice-struts2-plugin 2.0 - com.google.inject.integration:guice-struts2-plugin 1.0 - com.googlecode.rapid-framework:rapid-core 4.0 and more Source cves:...

org.jasig.cas:cas-server-support-pac4j (>=4.2.0-rc1, <=4.2.1), org.jasig.cas:cas-server-support-pac4j-webflow (>=4.2.0-rc1, <=4.2.1) +1 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.2)

org.pac4j:pac4j-oidc MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.jasig.cas:cas-server-support-pac4j =4.2.0-rc1, =4.2.0-rc1, =4.2.1 - org.pac4j:pac4j-config 1.8.2 Source cves:...

org.apache.knox:gateway-provider-security-pac4j (>=0.9.1, <=0.13.0), org.jasig.cas:cas-server-support-pac4j (>=4.2.5, <=4.2.7) +2 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.9)

org.pac4j:pac4j-oidc MAVEN version 1.8.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apache.knox:gateway-provider-security-pac4j =0.9.1, =4.2.5, =4.2.5, =4.2.7 - org.pac4j:pac4j-config 1.8.9 Source...

gnome-software and fwupd security, bug fix, and enhancement update

appstream-data 8-20200724 - Regenerate the RHEL metadata to include the EPEL apps too - Resolves: 1844488 8-20200630 - Regenerate the RHEL metadata - Resolves: 1844488 fwupd 1.4.2-4.0.1 - Build with the updated Oracle certificate - Use oraclesecureboot301 as certdir Orabug: 29881368 - Use new...

Acronis: Subdomain Takeover – www.jet.acronis.com pointing to unclaimed Webflow services

Hi Team, Greetings! I've come across another subdomainwww.jet.acronis.com of acronis.com pointing to an unclaimed Webflow service. Visiting the www.jet.acronis.com returned the default 404 page for Webflow service, thereby making it potential for subdomain takeover. F940499 Similar to the previou...

Acronis: Subdomain Takeover – jet.acronis.com pointing to unclaimed Webflow services

Hi Team, Greetings! I've come across jet.acronis.com of acronis.com pointing to an unclaimed Webflow service. Visiting the jet.acronis.com returned the default 404 page for Webflow service, thereby making it potential for subdomain takeover. F937948 jet.acronis.com CNAME pointed to...

Takeover v0.2 - Sub-Domain TakeOver Vulnerability Scanner

Sub-domain takeover vulnerability occur when a sub-domain subdomain.example.com is pointing to a service e.g: GitHub , AWS/S3 ,.. that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that sub-domain. For example, if...

org.jasig.cas:cas-server-support-pac4j (>=4.2.0-rc1, <=4.2.1), org.jasig.cas:cas-server-support-pac4j-webflow (>=4.2.0-rc1, <=4.2.1) +1 more potentially affected by CVE-2019-10755 via org.pac4j:pac4j-saml (1.8.2)

org.pac4j:pac4j-saml MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-saml and may be impacted: - org.jasig.cas:cas-server-support-pac4j =4.2.0-rc1, =4.2.0-rc1, =4.2.1 - org.pac4j:pac4j-config 1.8.2 Source cves:...