636 matches found
CVE-2019-7238
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...
Improper access control
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...
CVE-2019-7238
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...
CVE-2019-7238: Undefined Security Weakness
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...
Cross-Site Scripting (XSS)
nexus-repository is vulnerable to cross-site scripting XSS. A lack of input validation and output sanitization allows a remote attacker to inject arbitrary Javascript into victim's browser through multiple parameters...
Nexus Repository Manager 3 new vulnerability has been used in mining Trojan spread, users are advised to fix as soon as possible-vulnerability warning-the black bar safety net
Recently, Ali cloud security monitoring to watchbog mining Trojan use the new exposure of the Nexus Repository Manager 3 remote code execution vulnerabilityCVE-2019-7238for attack and mining the events. It is worth noting that this attack Start Time 2 on 24th and 2 on 5 May above products, the...
Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2019-07005)
Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A cross-site scripting vulnerability exists in Sonatype NXRM versions prior to 3.14. A remote attacker can exploit this vulnerability to execute arbitrary JavaScript code in a user's browser...
Sonatype Nexus Repository Manager Improper Access Control Vulnerability
Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A security vulnerability exists in Sonatype NXRM versions prior to 3.14, which is caused by the program failing to enforce proper access control. The vulnerability can be exploited to gain access to other hosts and open por...
Sonatype Nexus Repository Manager Java Code Execution Vulnerability
Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A security vulnerability exists in Sonatype NXRM versions prior to 3.14. An attacker can exploit the vulnerability to execute code on the server...
CVE-2018-16619
Sonatype Nexus Repository Manager before 3.14 allows XSS...
Design/Logic Flaw
Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...
Design/Logic Flaw
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...
CVE-2018-16621
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...
CVE-2018-16621
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...
Cross site scripting
Sonatype Nexus Repository Manager before 3.14 allows XSS...
CVE-2018-16619
Sonatype Nexus Repository Manager before 3.14 allows XSS...
CVE-2018-16621
CVE-2018-16621 affects Sonatype Nexus Repository Manager prior to version 3.14, where Java Expression Language Injection is possible. The root cause is insecure EL handling in the repository manager, enabling injection that can lead to server-side behavior manipulation. In the public records, the...
CVE-2018-16619
Sonatype Nexus Repository Manager before 3.14 allows XSS...
CVE-2018-16619
CVE-2018-16619 affects Sonatype Nexus Repository Manager prior to version 3.14 and is a cross-site scripting (XSS) vulnerability. The issue allows an attacker to execute arbitrary JavaScript in a user’s browser, with exploitation described as remote and requiring user interaction in some sources....