Open Source Vulnerabilities

org.bouncycastle:bc-fips, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bcprov-ext-jdk16, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk16, BouncyCastle

Timing based private key exposure in Bouncy Castle

org.owasp.esapi:esapi

Padding oracle attacks

com.jfinal:jfinal

Cross-site scripting in jfinal

com.epam.reportportal:service-api, com.epam.reportportal:service-api

XML External Entity Reference

org.apache.druid:druid-core

Druid ingestion system Authenticated users can read data from other sources than intended

org.apache.jena:jena-fuseki

Cross-site scripting in Apache Jena Fuseki

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Authentication Bypass by Alternate Name in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

HTTP Request Smuggling in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Handling of Exceptional Conditions in Apache Tomcat

linux, linux, linux

linux, linux, linux

kernel

CVE-2021-3573 affecting package kernel for versions less than 5.10.78.1-1

CVE-2021-3573 does not affect BellSoft software

linux-hwe-edge, linux-oem-osp1, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gcp-edge, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.8, linux-gcp-5.8, linux-oem-5.6, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.8, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

mariadb-10.3

mariadb-10.3, mariadb-10.5 vulnerabilities