Open Source Vulnerabilities

org.opensaml:xmltooling

XMLTooling Library Incorrectly Handles Some Exceptions

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

System Property Disclosure in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat vulnerable to SecurityManager bypass

org.springframework.security:spring-security-core, org.springframework.security:spring-security-core

Deserialization of Untrusted Data in Spring Security

org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:jasper, org.apache.tomcat.embed:tomcat-embed-jasper, org.apache.tomcat.embed:tomcat-embed-jasper, org.apache.tomcat.embed:tomcat-embed-jasper, org.apache.tomcat.embed:tomcat-embed-jasper, org.apache.tomcat.embed:tomcat-embed-jasper

Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Incorrect Authorization in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Observable Discrepancy in Apache Tomcat

org.apache.deltaspike.modules:jsf-module-project

Cross-site Scripting in Apache DeltaSpike

org.apache.flex.blazeds:flex-messaging-core, org.apache.flex.blazeds:flex-messaging-remoting

Apache Flex BlazeDS unsafe deserialization

xerces:xercesImpl

Missing XML Validation in Apache Xerces2

org.apache.axis2:axis2

Improper Authentication in Apache Axis2

org.springframework.security:spring-security-core, org.springframework.security:spring-security-core

Improper Authentication in Spring Security

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Deserialization of Untrusted Data in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Server-Side Request Forgery in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core, org.kohsuke.stapler:stapler-parent

Cross-site scripting vulnerability exists in Jenkins and Stapler Plugin

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Injection in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Input Validation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Incorrect Authorization in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Limitation of a Pathname to a Restricted Directory in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Insufficient Session Expiration in Jenkins

org.bouncycastle:bcprov-jdk15on

Improper Validation of Integrity Check Value in Bouncy Castle

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Neutralization of Input During Web Page Generation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Neutralization of Input During Web Page Generation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-Site Request Forgery in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Path Traversal in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Deserialization of Untrusted Data in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Input Validation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Incorrect Authorization in Jenkins

org.jenkins-ci.plugins:script-security

Sandbox bypass in Script Security Plugin

org.jenkins-ci.plugins:script-security

Sandbox Bypass in Script Security Plugin

facturascripts/facturascripts

Cross-site Scripting in facturascripts

eventsource, eventsource

Exposure of Sensitive Information in eventsource

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption

org.springframework:spring-messaging, org.springframework:spring-messaging

Allocation of Resources Without Limits or Throttling in Spring Framework

org.springframework:spring-beans, org.springframework:spring-beans

Denial of service in Spring Framework

Out-of-bounds Read in radareorg/radare2

libgoogle-gson-java

libgoogle-gson-java - security update

adminer

adminer - security update

ruby-nokogiri

ruby-nokogiri - security update

htmldoc

htmldoc - security update

lrzip

lrzip - security update