Vulnerabilities

TI-2024-15704 CVE-2024-23686 · GHSA-frxm-v7q3-v2wv

DependencyCheck Debug Mode Logging of NVD API Key

MEDIUM 57

DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00603 Published 2024-01-19 Fixed in 9.0.6 CWE-532

TI-2018-08627 CVE-2018-12036 · GHSA-hcwx-7q5v-vc67

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a…

LOW 37

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01683 Published 2018-06-07 Fixed in 3.2.0 CWE-123

Vulnerabilities

Filters

DependencyCheck Debug Mode Logging of NVD API Key

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a…