jeecg-boot SQL Injection vulnerability

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2023-1454

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

Sql injection

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2023-1454 jeecg-boot qurestSql sql injection

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2023-1454 jeecg-boot qurestSql sql injection

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2023-1454

Jeecg-boot 3.5.0 is affected by CVE-2023-1454 due to an SQL injection in jmreport/qurestSql via the apiSelectId parameter. Exploitation is possible remotely and public exploits exist (e.g., via PoCs in the provided repositories). Remediation in the connected documents urges upgrading Jeecg-boot t...

PT-2023-36110 · Oracle · Oracleasm

Name of the Vulnerable Software and Affected Versions: oracleasm affected versions not specified Description: The issue concerns a rebuild of the oracleasm package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...

PT-2023-16995

Name of the Vulnerable Software and Affected Versions jeecg-boot version 3.5.0 Description A critical vulnerability has been found in jeecg-boot, affecting an unknown part of the file jmreport/qurestSql. The manipulation of the apiSelectId argument leads to sql injection. It is possible to initia...

jeecg SQL注入漏洞

jeecg is a software application. An intelligent development platform based on a code generator. A SQL injection vulnerability exists in jeecg-boot version 3.5.0, which stems from a security issue in the file jmreport/qurestSql, which leads to SQL injection via the parameter apiSelectId...

SUSE-SU-2023:0772-1 Security update for drbd

This update of drbd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:0771-1 Security update for drbd

This update of drbd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

A Bootiful Podcast: Spring Batch lead Mahmoud Ben Hassine on the latest and greatest in 2023

Hi, Spring fans! Welcome to another installment of A Bootiful Podcast! In this installment, Josh Long @starbuxman talks to Spring Batch lead Mahmoud Ben Hassine @FMBENHASSINE about the latest and greatest in Spring Batch. notes Submit your talk to SpringOne@Explore, being held August 21-24, 2023,...

PT-2023-36108 · Drbd · Drbd

Name of the Vulnerable Software and Affected Versions: drbd affected versions not specified Description: The issue concerns a rebuild of the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2023-36109 · Drbd · Drbd

Name of the Vulnerable Software and Affected Versions: drbd affected versions not specified Description: The issue concerns a rebuild of the drbd package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

CVE-2023-28005

Summary: CVE-2023-28005 affects Trend Micro Endpoint Encryption Full Disk Encryption (TMEE FDE) ≤ 6.0.0.3204. The issue enables bypass of the Windows Secure Boot process when an attacker has physical access, potentially enabling further attacks to access device contents. The encrypted drive remai...

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

My-Blog 跨站脚本漏洞

My-Blog is a Java blog system implemented by SpringBoot + Mybatis + Thymeleaf and other technologies, with beautiful pages, full functionality, easy deployment and perfect code. My-Blog has a security vulnerability. An attacker can exploit this vulnerability to cause a denial of service via the...

Denial Of Service (DoS)

u-boot is vulnerable to Denial Of Service DoS. The vulnerability exists because the U-Boot DFU implementation does not bind the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command, allowing an attacker to write...