Sql injection

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

CVE-2021-45793

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

CVE-2021-45793

CVE-2021-45793 (Slims9 Bulian 9.4.2) is due to a SQL injection in lib/comment.inc.php. The NVD/Nuclei entries describe an SQLi that can lead to retrieving user data from the database; the Circl/RedHat entries corroborate affected software. The referenced exploit path is via the comment field, ena...

PT-2022-12410

Name of the Vulnerable Software and Affected Versions Slims9 Bulian version 9.4.2 Description The issue affects the lib/comment.inc.php file, allowing SQL injection attacks that can result in the obtainment of user data. Recommendations For Slims9 Bulian version 9.4.2, consider restricting access...

CVE-2021-45793: Improper Neutralization of Special Elements used in an SQL Command

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

redhat-support-lib-python and redhat-support-tool bug fix and enhancement update

An update is available for redhat-support-tool, redhat-support-lib-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The redhat-support-tool utility...

com.kyleu:projectile-lib-auth-graphql_2.12 (>=1.1.4, <=1.1.9), com.kyleu:projectile-lib-auth_2.12 (>=1.1.4, <=1.1.9) +2 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.20.3)

org.webjars:swagger-ui MAVEN version 3.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.kyleu:projectile-lib-auth-graphql2.12 =1.1.4, =1.1.4, =1.1.4, =1.1.5, =1.1.9 Source cves: CVE-2018-25031 Sourc...

com.jakehschwartz:finatra-swagger_2.11 (>=19.5.0, <=19.5.1), com.jakehschwartz:finatra-swagger_2.12 (>=19.5.0, <=19.5.1) +5 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.22.1)

org.webjars:swagger-ui MAVEN version 3.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.jakehschwartz:finatra-swagger2.11 =19.5.0, =19.5.0, =1.9.0, =0.0.4, =0.0.4, =0.0.31, =0.1.18, =0.1.26 Source...

CVE-2021-46704

In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument lib/ui/api.ts and lib/ping.ts. The vulnerability arises from insufficient input validation combined with a missing authorization check...

PT-2022-12907

Name of the Vulnerable Software and Affected Versions GenieACS versions 1.2.x through 1.2.7 Description The issue arises from insufficient input validation combined with a missing authorization check in the UI interface API, allowing unauthenticated OS command injection via the ping host argument...

CVE-2021-46704: Improper Neutralization of Special Elements used in an OS Command

In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument lib/ui/api.ts and lib/ping.ts. The vulnerability arises from insufficient input validation combined with a missing authorization check...

CVE-2022-25069

Mark Text v0.16.3 was discovered to contain a DOM-based cross-site scripting XSS vulnerability which allows attackers to perform remote code execution RCE via injecting a crafted payload into /lib/contentState/pasteCtrl.js...

com.hack23.cia:service.data.impl (2016.10.2), com.hack23.cia:service.impl (2016.10.2) +4 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.5.2)

org.liquibase:liquibase-core MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - com.hack23.cia:service.data.impl 2016.10.2 - com.hack23.cia:service.impl 2016.10.2 -...

PT-2022-17067

Name of the Vulnerable Software and Affected Versions Mark Text version 0.16.3 Description A DOM-based cross-site scripting XSS issue allows attackers to perform remote code execution RCE by injecting a crafted payload into /lib/contentState/pasteCtrl.js. This enables attackers to execute malicio...

lib

Linuxfabrik Python Libraries Python 3.9+ modules for Linuxfa...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.8), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.8) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.8 -...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.13) +8 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.13)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =2.0, =1.4, =1.12.1, =2.2,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.10.1) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.10.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10.1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-7) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-7)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-7 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-8), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-8) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-8 -...