VulnSea

retail_store_inventory_management vulnerabilities

CVEs whose affected-version data names the retail_store_inventory_management package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

4 CVEsRSS

CVE-2021-36374Medium· 5.5
5y ago

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using…

Sunlitapache · antEPSS 2.6%via NVD
CVE-2021-36373Medium· 5.5
5y ago

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Ap…

Sunlitapache · antEPSS 2.5%via NVD
CVE-2020-17521Medium· 5.5
5y ago

Apache Groovy provides extension methods to aid with creating temporary directories

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on …

Sunlitapache · groovyEPSS 1.1%via NVD
CVE-2017-12617High· 8.1CISA KEVPoC
8y ago

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possib…

Abyssalapache · tomcatEPSS 100%via NVD
retail_store_inventory_management vulnerabilities (CVEs) · VulnSea