Jeecg-Boot Cross-Site Scripting Vulnerability

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-Boot 3.0 has a security vulnerability that stems from a cross-site script in /jeecg-boot/jmreport/view that causes a mouse hover event. No details of the vulnerability are currently available...

Cross-site Scripting in jeecg-boot

jeecg-boot is a code generator. A Cross Site Scripting XSS vulnerabilitiy exists in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

Jeecg-boot SQL Injection Vulnerability

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot is vulnerable to SQL injection, which stems from a code parameter in /sys/user/queryUserComponentData that was found to be vulnerable to SQL injection. No detailed vulnerability details are...

Codex Exposed: Helping Hackers in Training?

How useful is the Codex code generator as a potential training tool?...

Mageia: Security Advisory (MGASA-2020-0258)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-2083

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Microsoft Edge affected versions not specified Description The issue is related to a use after free condition in the QR Code Generator extension, which can be exploited by a remote attacker to impa...

Codex Exposed: Exploring the Capabilities and Risks of OpenAI’s Code Generator

The first of a series of blog posts examines the security risks of Codex, a code generator powered by the GPT-3 engine...

Fedora: Security Advisory for rust-cranelift-codegen (FEDORA-2021-1805eacb48)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: rust-cranelift-codegen-meta-0.77.0-1.fc34

Metaprogram for cranelift-codegen code generator library...

[SECURITY] Fedora 34 Update: rust-cranelift-codegen-0.77.0-1.fc34

Low-level code generator library...

Fedora: Security Advisory for rust-cranelift-codegen (FEDORA-2021-68713440cb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: rust-cranelift-codegen-0.77.0-1.fc35

Low-level code generator library...

Jeecg-boot CMS Arbitrary File Upload Vulnerability

Jeecg-Boot is an intelligent development platform based on code generator. Jeecg-boot CMS version 2.3 of /jeecg-boot/sys/common/upload is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary code...

CVE-2021-32629

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

PYSEC-2021-87

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

CVE-2021-32629 Memory access due to code generation flaw in Cranelift module

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

CVE-2021-32629

Cranelift’s x64 backend bug in 0.73 (and certain earlier builds when the new backend is explicitly selected) can sign-extend a loaded i32 value, potentially enabling sandbox escapes in Wasm modules and exposing memory up to 2 GiB before the heap. Wasmtime and Lucet using Cranelift may be exploita...

datamodel-code-generator (>=0.1.0, <=0.2.4), lambdantic (>=0.0.1, <=0.0.4) potentially affected by CVE-2021-29510 via pydantic (0.32.0)

pydantic PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - datamodel-code-generator =0.1.0, =0.0.1, =0.0.4 Source cves: CVE-2021-29510 Source advisory: OSV:GHSA-5JQP-QGF6-3PVH...

datamodel-code-generator (>=0.1.0, <=0.2.4), lambdantic (>=0.0.1, <=0.0.4) potentially affected by CVE-2021-29510 via pydantic (0.32.0)

pydantic PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - datamodel-code-generator =0.1.0, =0.0.1, =0.0.4 Source cves: CVE-2021-29510 Source advisory: OSV:PYSEC-2021-47...

com.faendir.vaadin:jfreechart-flow (1.1.6), com.github.mcollovati.vertx:vaadin-flow-sockjs (0.2.0) +89 more potentially affected by CVE-2018-25007 via com.vaadin:flow-server (>=1.0.0, <=1.0.5)

com.vaadin:flow-server MAVEN version =1.0.0, =0.2.0, =0.5.0, =1.0.0.alpha1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.5 and more Source cves: CVE-2018-25007 Source advisory: MEND:CVE-2018-25007...