[SECURITY] Fedora 30 Update: nodejs-yarn-1.21.1-1.fc30

Fast, reliable, and secure dependency management...

Fedora: Security Advisory for nodejs-yarn (FEDORA-2020-7525beefa1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Testing Plugin for Maven & Gradle

Maven and Gradle Maven and Gradle are build automation and dependency management systems used primarily for Java projects. Their goals are to provide a uniform build system and to simplify the build process altogether. They are used for dependency management, testing, and building of simple to...

Spring data rest 远程代码执行(cve-2017-8046)

漏洞描述 漏洞描述 Spring Data Rest 在处理 PATCH 请求时存在RCE高危漏洞, 可以使用手工构造的JSON数据构造恶意PATCH请求提交至spring-data-rest服务器，使得服务器运行恶意JAVA代码。Spring Data Rest项目的目标是提供一种灵活的、可配置的机制，编写出可以对外暴露出HTTP协议的简单服务。 Git地址: https://github.com/spring-projects/spring-data-rest 漏洞来源: https://pivotal.io/security/cve-2017-8046 影响版本： Spring...

SUSE-SU-2017:2303-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2016-10397: parseurl can be bypassed to return fake host. bsc1047454 - CVE-2017-11142: Remoteattackers could cause a CPU consumption denial of service attack by injectinglong form variables, related to main/phpvariables. bsc1048100 -...

Moderate: Red Hat Security Advisory: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update

Updated rubygem-bundler and rubygem-thor packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS...

Fedora Update for zeroinstall-injector FEDORA-2013-12421

Check for the Version of zeroinstall-injector OpenVAS Vulnerability Test Fedora Update for zeroinstall-injector FEDORA-2013-12421 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[SECURITY] Fedora 17 Update: zeroinstall-injector-2.3-1.fc17

The Zero Install Injector makes it easy for users to install software without needing root privileges. It takes the URL of a program and runs it downloading it first if necessary. Any dependencies of the program are fetched in the same way. The user controls which version of the program and its...