CVE-2019-5475

CVE-2019-5475 CVE-2019-5475 and CVE-2019-15588 Range: RCE Command Injection Vulnerability 0x00 Background CVE-2019-5475 is an RCE command injection vulnerability in Nexus regarding the built-in plugin Yum Repository. It was first disclosed on hackerone, but because the official first fix was...

CVE-2019-5475

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

flatpak bug fix and enhancement update

An update is available for mozilla-filesystem, sbc, dbus-glib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list These packages will be released only via the...

Important: Red Hat Security Advisory: RHV-H security, bug fix, enhancement update (redhat-virtualization-host) 4.3.13

An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Exploit for OS Command Injection in Sonatype Nexus_Repository_Manager

CVE-2019-5475 CVE-2019-5475 and CVE-2019-15588: RCE command...

Exploit for OS Command Injection in Sonatype Nexus_Repository_Manager

CVE-2019-5475 CVE-2019-5475 and CVE-2019-15588: RCE command...

GHSA-G5M7-57PH-J6P8 OS Command Injection in Nexus Yum Repository Plugin

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

io.takari.nexus.assemblies:takari-oss (1.0.1) potentially affected by CVE-2019-5475 via org.sonatype.nexus.plugins:nexus-yum-repository-plugin (2.13.0-01)

org.sonatype.nexus.plugins:nexus-yum-repository-plugin MAVEN version 2.13.0-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus.plugins:nexus-yum-repository-plugin and may be impacted: - io.takari.nexus.assemblies:takari-oss 1.0.1...

io.takari.nexus.assemblies:takari-oss (1.0.1) potentially affected by CVE-2019-5475 via org.sonatype.nexus.plugins:nexus-yum-repository-plugin (2.13.0-01)

org.sonatype.nexus.plugins:nexus-yum-repository-plugin MAVEN version 2.13.0-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus.plugins:nexus-yum-repository-plugin and may be impacted: - io.takari.nexus.assemblies:takari-oss 1.0.1...

OS Command Injection in Nexus Yum Repository Plugin

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

Remote Code Execution

nexus-yum-repository-plugin is vulnerable to remote code execution. An attacker with administrative access to nxrm is able to execute arbitrary OS commands on the system by setting the path of createrepo or mergerepo to an OS command in the XML input...

CVE-2019-5475

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

Remote code execution

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

CVE-2019-5475

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

CVE-2019-5475

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

CVE-2019-5475

CVE-2019-5475 is an OS command injection in the Nexus Yum Repository Plugin (Nexus Repository Manager) that can lead to Remote Code Execution. The vulnerability occurs in the Yum: Configuration capability when the capability’s payload data is not properly sanitized, allowing an attacker with admi...

CVE-2019-5475: Improper Neutralization of Special Elements used in an OS Command

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

PT-2019-17696

Name of the Vulnerable Software and Affected Versions Nexus Yum Repository Plugin version v2 Description The issue allows for Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability. Recommendations For Nexus Yum...

[SECURITY] Fedora 26 Update: python-copr-1.84-1.fc26

COPR is lightweight build system. It allows you to create new project in We bUI, and submit new builds and COPR will create yum repository from latest build s. This package contains python interface to access Copr service. Mostly useful for developers only...

[SECURITY] Fedora 27 Update: python-copr-1.84-1.fc27

COPR is lightweight build system. It allows you to create new project in We bUI, and submit new builds and COPR will create yum repository from latest build s. This package contains python interface to access Copr service. Mostly useful for developers only...