Improper Control of Generation of Code ('Code Injection')

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream SCSt microservice. arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and all users are advised to upda...

GHSA-R6JX-9G48-2R5R

creationtimestamp| type| source ---|---|--- 2021-08-23 18:03:31+00:00| published-proof-of-concept| https://t.me/cKure/6729 2021-08-25 12:12:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4150...

GHSA-6XX3-RG99-GC3P vulnerabilities

Vulnerabilities for packages: hadoop-fips, elasticsearch...

CVE-2021-37694

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream SCSt microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and al...

Code injection

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream SCSt microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and al...

CVE-2021-37694 Code injection issue for java-spring-cloud-stream-template

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream SCSt microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and al...

Zope RCE Vulnerability (GHSA-g4gq-j4p2-j8fr)

Zope is prone to a remote code execution RCE vulnerability via Script Python objects under Python 3. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

GHSA-FP52-QW33-MFMW vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-C72P-9XMJ-RX3W vulnerabilities

Vulnerabilities for packages: ctop...

@acaciomartins/react-native-simpletable (>=0.0.1, <=0.0.2), @alan-ai/alan-sdk-react-native (>=1.0.4, <=1.0.7) +1209 more potentially affected by CVE-2020-1920 via react-native (>=0.59.0, <=0.62.2)

react-native NPM version =0.59.0, =0.0.1, =1.0.4, =1.0.0-rn-83, =2.3.3, =3.1.0-rn-83, =2.0.1, =2.0.1758683737, =2.1.87, =1.0.1767254401, =1.1.3, =1.3.0, =0.1.0, =0.4.0 and more Source cves: CVE-2020-1920 Source advisory: OSV:GHSA-7F53-FMMV-MFJV...

GHSA-8H2G-R292-J8XH vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-25GF-8QRR-G78R vulnerabilities

Vulnerabilities for packages: k3d...

Eclipse Jetty Information Disclosure Vulnerability (GHSA-vjv5-gp2w-65vm) - Windows

Eclipse Jetty is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"...

Eclipse Jetty Information Disclosure Vulnerability (GHSA-vjv5-gp2w-65vm) - Linux

Eclipse Jetty is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"...

CVE-2021-34429

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc...

GHSA-XXX5-8MVQ-3528

creationtimestamp| type| source ---|---|--- 2021-07-08 18:06:55+00:00| seen| https://t.me/linkersec/93...

GHSA-CJJC-XP8V-855W vulnerabilities

Vulnerabilities for packages: k3d, dex-k8s-authenticator...

GHSA-56HP-XQP3-W2JF

creationtimestamp| type| source ---|---|--- 2021-06-17 08:20:29+00:00| seen| Telegram/x7kX4PZBtnGuQa2DJABTToNpcoCdFXitU976Bw1W0XFRyo...

elFinder < 2.1.59 Multiple Vulnerabilities (GHSA-wph3-44rj-92pr)

elFinder is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:std42:elfinder"; ifdescription...

Lucee < 5.3.5.96, 5.3.6.x < 5.3.6.68, 5.3.7.x < 5.3.7.47 RCE Vulnerability (GHSA-2xvv-723c-8p7r) - Version Check

Lucee is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:lucee:luceeserver";...