Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.8 2D5B9636-CBA3-

Exploit for OS Command Injection in Apache Nifi_2D5B9636-CBA3-5F2E-8365-F95DB3051F53

# Apache NiFi ### Status [![ci-workflow](https://github.com/apache/nifi/workflows/ci-workflow/badge.svg)](https://github.com/apache/nifi/acti...

N/A N/A GITHUBEXPLOIT
HIGH 7.5 57F33DA8-E9FE-

Exploit for Path Traversal in Apache Uimaj_57F33DA8-E9FE-591A-A255-C367BA436DD7

Welcome to the Apache UIMA Java SDK ----------------------------------- [Apache UIMA][UIMA] helps you managing unstructured data (such as texts) t...

N/A N/A GITHUBEXPLOIT
HIGH 7.5 FF223557-516A-

Exploit for Path Traversal in Hapifhir Hl7_Fhir_Core_FF223557-516A-5CA6-87CF-7F54E811DC11

# HAPI FHIR - HL7 FHIR Core Artifacts | CI Status (master) | | :---: | | [![Build Status][Badge-BuildPipeline]][Link-AzureMasterPipeline] | Th...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.1 E4B67BAC-7148-

Exploit for Cross-site Scripting in Apache Jspwiki_E4B67BAC-7148-5DE8-B025-773248B9B158

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOT...

N/A N/A GITHUBEXPLOIT
HIGH 8.8 3755C7E5-094C-

Exploit for Path Traversal in Diffplug Goomph_3755C7E5-094C-58E0-A3B5-95FDB1B4CC5A

Goomph: IDE as build artifact Also plugins for working with SWT, OSGi, p2, and Eclipse RCP IDE-as-build-artifact. It is possible to have man...

N/A N/A GITHUBEXPLOIT
HIGH 8.5 56E6EEA8-93D7-

Exploit for Path Traversal in Apache Sling_Servlets_Resolver_56E6EEA8-93D7-57C7-92B8-1564A9624F4E

[](https://www.javadoc.io/doc/org.apache.sling/org.apache.s...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 EDEE5D1B-C9A2-

Exploit for UNIX Symbolic Link Following in Codehaus-Plexus Plexus-Archiver_EDEE5D1B-C9A2-5BFC-97ED-7E4C5A1C67C4

Plexus-archiver The current master is now at https://github.com/codehaus-plexus/plexus-archiver Important Hint Based on a hint of snyk.io secur...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 93864F83-CFF8-

Exploit for Code Injection in Sqlite_Jdbc_Project Sqlite_Jdbc_93864F83-CFF8-5A2A-864A-1333E2D80703

SQLite JDBC Driver SQLite JDBC is a library for accessing and creating SQLite database files in Java. Our SQLiteJDBC library requires no confi...

N/A N/A GITHUBEXPLOIT
MEDIUM 4.3 D3258422-5EAB-

Exploit for Path Traversal in Apache James_D3258422-5EAB-5439-832A-883DC73F1CB9

Apache James Project :latest_james_version: 3.8.0...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.1 81929D7B-8D0D-

Exploit for Cross-site Scripting in Owasp Enterprise_Security_Api_81929D7B-8D0D-5EBF-8831-1EB2AD06495C

Please note that: 1) The LICENSE file only refers to the licensing of the source and binary code of ESAPI. For example, the actual ESAPI JAR fi...

N/A N/A GITHUBEXPLOIT