13 matches found
EUVD-2022-0910
Malicious code in bioql PyPI...
CVE-2020-5428
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...
CVE-2020-5428
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...
Sql injection
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...
CVE-2020-5428 Possibility of SQL Injection in Spring Cloud Task Execution Sorting Query
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...
CVE-2020-5428
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...
CVE-2020-5428: Improper Neutralization of Special Elements used in an SQL Command
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...
PT-2021-12402
Name of the Vulnerable Software and Affected Versions Spring Cloud Task versions 2.2.4.RELEASE and below Description The issue affects applications using certain versions of Spring Cloud Task, making them potentially vulnerable to SQL injection attacks when specific lookup queries are performed i...
CVE-2020-5428
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...
Code injection
An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe...
CVE-2018-10404
CVE-2018-10404 affects Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign and procInfo. A maliciously crafted Universal/Fat binary can bypass third‑party code signing checks, causing unsigned code to be executed while a legitimate Apple-signed Mach‑O in a Fat/Universal bundle is believed...
PT-2018-9868
Name of the Vulnerable Software and Affected Versions: Objective-See KnockKnock affected versions not specified Objective-See LuLu affected versions not specified Objective-See TaskExplorer affected versions not specified Objective-See WhatsYourSign affected versions not specified Objective-See...
CVE-2018-10404: Improper Certificate Validation
An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe...