Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift that stems from a cron job to update mcollective with error handling temporary...

Malicious code in node-cron-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae251f427512a885e950ac70e8039b90f8ef6d22e8393886461f599805dc0688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-cron-master1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1116bb33470ca9581591802dcf0769f1108fc3116f737866e526ea461a13b237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cron-guru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59fc7f83ba3d39b56b332fb2105a5ffd56d875a6c3b9333e4210c56234c4825c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2242 Malicious code in cron-guru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59fc7f83ba3d39b56b332fb2105a5ffd56d875a6c3b9333e4210c56234c4825c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4883 Malicious code in node-cron-master1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1116bb33470ca9581591802dcf0769f1108fc3116f737866e526ea461a13b237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4882 Malicious code in node-cron-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae251f427512a885e950ac70e8039b90f8ef6d22e8393886461f599805dc0688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Webmin <= 1.994 Multiple Vulnerabilities

Webmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webmin:webmin"; ifdescription...

Malicious code in cron-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767cf74abe659abd511efa142db25a3161d82c6bccedc8c596e0591ba5b4308a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2243 Malicious code in cron-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767cf74abe659abd511efa142db25a3161d82c6bccedc8c596e0591ba5b4308a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Improper Authentication in Atlassian Jira_Data_Center

Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540）...

org.jenkins-ci.plugins:cron-shelve (=1.3) potentially affected by CVE-2020-2321 via org.jenkins-ci.plugins:shelve-project-plugin (=1.5)

org.jenkins-ci.plugins:shelve-project-plugin MAVEN version =1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:shelve-project-plugin and may be impacted: - org.jenkins-ci.plugins:cron-shelve =1.3 Source cves: CVE-2020-2321 Sourc...

GHSA-9CRX-P357-5VW8 Ajenti Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Ajenti before 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

Ajenti Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Ajenti before 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

Cross-site scripting XSS vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."...

org.jenkins-ci.plugins:cron-shelve (=1.3) potentially affected by CVE-2018-1999029 via org.jenkins-ci.plugins:shelve-project-plugin (=1.5)

org.jenkins-ci.plugins:shelve-project-plugin MAVEN version =1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:shelve-project-plugin and may be impacted: - org.jenkins-ci.plugins:cron-shelve =1.3 Source cves: CVE-2018-1999029...

GHSA-8QPF-FV36-H4R8 Infinite Loop in Jenkins Core

A Cron expression form validation could enter infinite loop, potentially resulting in denial of service. The form validation for cron expressions e.g. "Poll SCM", "Build periodically" could enter infinite loops when cron expressions only matching certain rare dates were entered, blocking request...

Infinite Loop in Jenkins Core

A Cron expression form validation could enter infinite loop, potentially resulting in denial of service. The form validation for cron expressions e.g. "Poll SCM", "Build periodically" could enter infinite loops when cron expressions only matching certain rare dates were entered, blocking request...

USN-5259-3: Cron regression

USN-5259-1 and USN-5259-2 fixed vulnerabilities in Cron. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the postinst maintainer script in Cron unsafely...

USN-5259-3 cron regression

USN-5259-1 and USN-5259-2 fixed vulnerabilities in Cron. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the postinst maintainer script in Cron unsafely...