com.thinkbiganalytics.kylo.plugins:kylo-sla-email (>=0.9.1, <=0.10.0), com.thinkbiganalytics.kylo:kylo-metadata-modeshape (0.9.1) +1 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (2.0.0)

com.cronutils:cron-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.thinkbiganalytics.kylo.plugins:kylo-sla-email =0.9.1, =0.9.1, =0.10.0 Source cves: CVE-2020-26238 Source...

pl.touk.nussknacker:nussknacker-management-sample_2.11 (>=0.1.0, <=0.3.0), pl.touk.nussknacker:nussknacker-management-sample_2.12 (>=0.1.0, <=0.3.0) +2 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (3.1.1)

com.cronutils:cron-utils MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - pl.touk.nussknacker:nussknacker-management-sample2.11 =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.2 Source cves:...

com.cronutils:cron-utils-spring (1.0.1), de.skuzzle.inject:guice-async-extension (>=0.1.0, <=0.3.0) +1 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (3.1.6)

com.cronutils:cron-utils MAVEN version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.cronutils:cron-utils-spring 1.0.1 - de.skuzzle.inject:guice-async-extension =0.1.0, =0.0.2, =0.0.4 Source...

CVE-2020-26238: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before version 9.1.3, a template Injection vulnerability is present. This enables attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote...

PT-2020-16799

Name of the Vulnerable Software and Affected Versions xdg-utils versions 1.1.0-rc1 and newer Description A flaw was found in the xdg-email component. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could...

PT-2020-16366

Name of the Vulnerable Software and Affected Versions cron-utils versions prior to 9.1.3 Description A template injection vulnerability is present in cron-utils, enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution RCE vulnerability. This...

Fedora 32 : cifs-utils (2020-cfdd73f1b4)

New upstream release : - fixes CVE-2020-14342 cifs-utils: shell command injection in mount.cifs - adds smb2-quota tool - adds mount.smb3 as a symlink to mount.cifs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora 33 : cifs-utils (2020-ea0b9caac3)

New upstream release : - fixes CVE-2020-14342 cifs-utils: shell command injection in mount.cifs - adds smb2-quota tool - adds mount.smb3 as a symlink to mount.cifs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

3nit-utils (0.24.0), @8base/api-cli (>=0.0.1, <=0.1.0) +346 more potentially affected by CVE-2020-7769 via nodemailer (>=6.0.0, <=6.4.15)

nodemailer NPM version =6.0.0, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =1.2.1, =0.16.9, =0.17.0 - @agnostack/sync-moltin-to-shipstation 1.0.0 and more Source cves: CVE-2020-7769 Source advisory: SNYK:JS-NODEMAILER-1038834...

Fedora: Security Advisory for cifs-utils (FEDORA-2020-cfdd73f1b4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cifs-utils (FEDORA-2020-ea0b9caac3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-0418

In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813...

CVE-2020-14342 affecting package cifs-utils 6.8-6

CVE-2020-14342 affecting package cifs-utils 6.8-6. A patched version of the package is available...

cloud-utils-growpart bug fix and enhancement update

An update is available for cloud-utils-growpart. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...

new module: perl:5.30

An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...

gfs2-utils bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

nfs-utils bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

PT-2020-22691

Name of the Vulnerable Software and Affected Versions sn ffi utils affected versions not specified Description The software has been renamed from ffi utils to sn ffi utils and its repository location has been updated. Recommendations At the moment, there is no information about a newer version th...

EulerOS 2.0 SP8 : cifs-utils (EulerOS-SA-2020-2305)

According to the version of the cifs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2020-2305)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...