Lucene search
+L

30 matches found

Github Security Blog
Github Security Blog
added 2022/09/29 12:0 a.m.28 views

XXL-JOB contains a Command execution vulnerability in background tasks

XXL-JOB versions 2.2.0 and prior contain a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

9.8CVSS9.7AI score0.01266EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/09/29 12:0 a.m.53 views

GHSA-M54F-RP6R-RRRM XXL-JOB contains a Command execution vulnerability in background tasks

XXL-JOB versions 2.2.0 and prior contain a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

9.8CVSS6.2AI score0.01266EPSS
Exploits1References3
NVD
NVD
added 2022/09/28 6:15 p.m.47 views

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

9.8CVSS0.01266EPSS
Exploits1References1
Prion
Prion
added 2022/09/28 6:15 p.m.17 views

Command injection

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks...

7.5CVSS9.5AI score0.01266EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/28 12:0 a.m.3 views

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

9.6AI score0.01266EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/09/28 12:0 a.m.50 views

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

9.9AI score0.01266EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/09/28 12:0 a.m.10 views

PT-2022-25627 · Xxl-Job · Xxl-Job

Name of the Vulnerable Software and Affected Versions: XXL-JOB versions 2.2.0 and prior Description: The issue concerns a Command execution vulnerability in background tasks, which is disputed as it may be an intended use case for running arbitrary Bash scripts on behalf of users. Recommendations...

9.8CVSS6.9AI score0.01266EPSS
Exploits1References8
OpenVAS
OpenVAS
added 2021/05/27 12:0 a.m.19 views

Fedora: Security Advisory for python-starlette (FEDORA-2021-e7fabd81fb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.00967EPSS
Exploits0References2
Fedora
Fedora
added 2021/05/23 1:7 a.m.171 views

[SECURITY] Fedora 34 Update: python-starlette-0.14.2-6.fc34

Starlette is a lightweight ASGI framework/toolkit, which is ideal for build ing high performance asyncio services. It is production-ready, and gives you the following: Seriously impressive performance. WebSocket support. GraphQL support. In-process background tasks. Startup and shutdown events...

5CVSS0.1AI score0.00967EPSS
Exploits0
Fedora
Fedora
added 2016/07/23 7:7 p.m.20 views

[SECURITY] Fedora 24 Update: kf5-kded-5.24.0-1.fc24

KDED stands for KDE Daemon which isn't very descriptive. KDED runs in the background and performs a number of small tasks. Some of these tasks are built in, others are started on demand. Custom KDED modules can be provided by 3rd party frameworks and applications...

7.5CVSS2.1AI score0.04429EPSS
Exploits1
Rows per page
Query Builder