Fedora: Security Advisory for mujs (FEDORA-2020-53773f4954)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : mujs (2020-53773f4954)

A new version of mujs is now available for Fedora and EPEL. Besides generic enhancements and bugfixes, this release also fixes three tracked security issues: CVE-2019-11411, CVE-2019-11412 and CVE-2019-11413. Note that Tenable Network Security has extracted the preceding description block directl...

GLSA-202007-52 : mujs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-52 mujs: Multiple vulnerabilities Multiple vulnerabilities have been discovered in mujs. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

CVE-2019-11413

An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check...

CVE-2019-11413

An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check...

CVE-2019-11413

CVE-2019-11413 affects Artifex MuJS, reported as an unlimited recursion vulnerability in the match function within regexp.c due to lack of a depth check. Affected version cited: MuJS 1.0.5. Documented impact indicates potential stack/recursion-related issues; no explicit exploit details, kill cha...

CVE-2018-11413

An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...

CVE-2018-11413

BearAdmin 0.5 is affected by CVE-2018-11413. A remote attacker can trigger directory traversal via /admin/databack/download.html?name=, e.g., name=../application/database.php, to read configuration credentials (MySQL) from the server. Affected component: databack/download.html handling of the nam...

CVE-2017-11413

CVE-2017-11413 affects Fiyo CMS version 2.0.7, with a SQL injection in the file dapur/apps/app_article/controller/comment_status.php that can be triggered via the HTTP GET parameter $_GET['id']. The connected documents consistently describe the vulnerability path and target file, confirming an un...