9 matches found
CVE-2020-7712 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
Oracle Siebel Server <= 22.5 (April 2023 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2023 CPU advisory. - Vulnerability in the Siebel CRM product of Oracle Siebel CRM component: Loging Apache ZooKeeper. Supported versions that are affected are 22.5 and prior...
Oracle Primavera Unifier (Oct 2022 CPU)
The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Document Management Apache Solr. Supported...
Command injection in json
Overview In versions of json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function. Recommendation Upgrade to version 10.0.0 or later References - CVE - GitHub Advisory...
logviewer (=1.0.0), samuel (>=0.0.1 <=0.0.227) potentially affected by CVE-2020-7712 via json (>=0.0.12 <=0.0.14)
json NPM version =0.0.12, =0.0.1, =0.0.227 Source cves: CVE-2020-7712 Source advisory: OSV:GHSA-3C6G-PVG8-GQW2...
CVE-2020-7712
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function...
CVE-2020-7712
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function...
CVE-2020-7712 Command Injection
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function...
CVE-2020-7712
CVE-2020-7712—Initial public details: the vulnerability in json package prior to 10.0.0 enables arbitrary command injection via parseLookup. Connected data from a Nessus plugin (Oracle Siebel Server <= 22.5) cites the CVE and describes a vulnerability in Siebel CRM (component: Loging/APache Zo...