dvja icon indicating copy to clipboard operation
dvja copied to clipboard

Damn Vulnerable Java (EE) Application

Results 19 dvja issues
Sort by recently updated
recently updated
newest added

Getting permission error when docking docker-compose up

Bumps [mysql-connector-java](https://github.com/mysql/mysql-connector-j) from 5.1.42 to 8.0.28. Changelog Sourced from mysql-connector-java's changelog. Changelog https://dev.mysql.com/doc/relnotes/connector-j/8.0/en/ Version 8.0.29 Fix for Bug#21978230, COMMENT PARSING NOT PROPER IN PREPSTMT.EXECUTEBATCH(). Fix for Bug#81468 (23312764), MySQL server...

dependencies

Bumps [gson](https://github.com/google/gson) from 2.8.1 to 2.8.9. Release notes Sourced from gson's releases. Gson 2.8.9 Make OSGi bundle's dependency on sun.misc optional (#1993). Deprecate Gson.excluder() exposing internal Excluder class (#1986). Prevent...

dependencies

Bumps [struts2-core](https://github.com/apache/struts) from 2.3.30 to 2.5.30. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.struts:struts2-core&package-manager=maven&previous-version=2.3.30&new-version=2.5.30)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies

Bumps [hibernate-core](https://github.com/hibernate/hibernate-orm) from 3.3.1.GA to 5.4.24.Final. Release notes Sourced from hibernate-core's releases. Hibernate ORM 5.2.0 5.2.0 includes many improvements and bug-fixes. For a complete list of changes, see https://hibernate.atlassian.net/projects/HHH/versions/23150/tab/release-report-done. Many...

dependencies

Bumps log4j-core from 2.3 to 2.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.logging.log4j:log4j-core&package-manager=maven&previous-version=2.3&new-version=2.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies

Bumps log4j-api from 2.3 to 2.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.logging.log4j:log4j-api&package-manager=maven&previous-version=2.3&new-version=2.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies

`SQL Injection: User Search` under `A1: Injection` does not return all users for the query `' or '1'='1` It only returns one user record out of 3 user records.

Updated Dockerfile to install ping utility for Command Injection: Network Connectivity Test