EUVD-2017-16271

Malware in sbrugna...

Ninka Security Bypass Vulnerability

Ninka is a set of source code license identification tools. A security vulnerability exists in Ninka versions prior to 1.3.2. It can be exploited by remote attackers to obtain sensitive information or cause a denial of service process hang by means of a specially crafted filename...

CVE-2017-7239

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

CVE-2017-7239

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

Code injection

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

CVE-2017-7239

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

CVE-2017-7239

Removed by vendor...

CVE-2017-7239

CVE-2017-7239 affects Ninka before 1.3.2. A crafted filename can allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a DoS (process hang). The NVD notes a high/critical impact profile (CVSS v2 base 7.5, v3 base 9.8). Remediation suggested b...

CVE-2017-7239: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...