@medley/medley (>=0.11.0, <=0.12.1), @nova/azure-functions (>=0.3.0, <=0.3.3) +1 more potentially affected by CVE-2020-7764 via find-my-way (>=2.0.1, <=2.1.0)

find-my-way NPM version =2.0.1, =0.11.0, =0.3.0, =1.0.0, =1.1.0 Source cves: CVE-2020-7764 Source advisory: SNYK:JS-FINDMYWAY-1038269...

Amazon Linux AMI : mysql57 (ALAS-2020-1439)

The version of mysql57 installed on the remote host is prior to 5.7.31-1.16. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1439 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are...

CVE-2020-15157: Insufficiently Protected Credentials

In containerd an industry-standard container runtime before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific image layer otherwise known as a “foreign...

wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This iss...

wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This iss...

Prototype Pollution

simpl-schema is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

CVE-2020-7742

This affects the package simpl-schema before 1.10.2...

Code injection

This affects the package simpl-schema before 1.10.2...

CVE-2020-7742 Prototype Pollution

This affects the package simpl-schema before 1.10.2...

CVE-2020-7742

CVE-2020-7742 affects the JavaScript package simpl-schema up to version 1.10.1. The vulnerability is a prototype pollution flaw in the library's merge logic (used for merging inputs into schemas), allowing attacker-controlled input to mutate Object.prototype and potentially lead to remote code ex...

@demandcluster/api-plugin-files (>=1.0.0, <=1.0.4), @deskpro/apps-installer (>=0.3.1, <=0.4.5) +49 more potentially affected by CVE-2020-7742 via simpl-schema (>=0.0.1, <=1.8.1)

simpl-schema NPM version =0.0.1, =1.0.0, =0.3.1, =0.1.3, =0.0.3, =1.0.8, =0.0.9, =1.0.5, =1.2.3, =1.0.3, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2020-7742 Source advisory: MEND:CVE-2020-7742...

CVE-2020-7742

This affects the package simpl-schema before 1.10.2...

CVE-2020-7742

This affects the package simpl-schema before 1.10.2...

PostgreSQL 10.x < 10.14, 11.x < 11.9, 12.x < 12.4 Search Path Vulnerability - Windows

PostgreSQL is prone to an uncontrolled search path element vulnerability in logical replication. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CVE-2020-7742: Undefined Security Weakness

This affects the package simpl-schema before 1.10.2...

PT-2020-19759

Name of the Vulnerable Software and Affected Versions simpl-schema versions prior to 1.10.2 Description The issue allows an attacker to execute remote code within the scope of the surrounding application by providing controlled input into a schema. Recommendations For versions prior to 1.10.2,...

libxml2 security and bug fix update

2.9.1-6.0.1.5 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.9.1-6.5 - Fix CVE-2019-19956 1793000 - Fix CVE-2019-20388 1810057 - Fix CVE-2020-7595 1810073 - Fix xsd:any schema validation 1812145...

bmoor-cache (>=0.3.0, <=0.6.0), bmoor-comm (>=0.0.1, <=0.6.0) +4 more potentially affected by CVE-2020-7736 via bmoor (>=0.0.5, <=0.5.1)

bmoor NPM version =0.0.5, =0.3.0, =0.0.1, =0.2.0, =0.1.0, =0.0.4, =0.6.0, =0.6.43 Source cves: CVE-2020-7736 Source advisory: MEND:CVE-2020-7736...

Prototype Pollution

Overview simpl-schema is a schema validation package that supports direct validation of MongoDB update modifier objects. Affected versions of this package are vulnerable to Prototype Pollution. PoC const SimpleSchema = require"simpl-schema".default; let obj = ; console.log"Before : " +...

@demandcluster/api-plugin-files (>=1.0.0, <=1.0.4), @goodcastle/api-plugin-epayco-cash (>=0.0.3, <=0.2.5) +28 more potentially affected by CVE-2020-7742 via simpl-schema (>=1.4.1, <=1.8.1)

simpl-schema NPM version =1.4.1, =1.0.0, =0.0.3, =1.0.8, =0.0.9, =1.0.5, =1.2.3, =1.0.3, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.7 - @idigi/reaction-plugin-newsletters 0.0.2 and more Source cves: CVE-2020-7742 Source advisory: SNYK:JS-SIMPLSCHEMA-1016157...