WordPress Link Fixer plugin <= 3.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by omstaendlig in WordPress Plugin Link Fixer versions = 3.4...

eu.europa.ec.joinup.sd-dss:dss-cookbook (6.0), eu.europa.ec.joinup.sd-dss:dss-jacoco-coverage (6.0) +7 more potentially affected by CVE-2024-28109 via org.verapdf:core-jakarta (1.24.1)

org.verapdf:core-jakarta MAVEN version 1.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.verapdf:core-jakarta and may be impacted: - eu.europa.ec.joinup.sd-dss:dss-cookbook 6.0 - eu.europa.ec.joinup.sd-dss:dss-jacoco-coverage 6.0 -...

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 XZ-Utils Vulnerability Checker and Fixer Th...

eu.europa.ec.joinup.sd-dss:dss-cookbook (6.0), eu.europa.ec.joinup.sd-dss:dss-jacoco-coverage (6.0) +7 more potentially affected by CVE-2024-28109 via org.verapdf:core-jakarta (1.24.1)

org.verapdf:core-jakarta MAVEN version 1.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.verapdf:core-jakarta and may be impacted: - eu.europa.ec.joinup.sd-dss:dss-cookbook 6.0 - eu.europa.ec.joinup.sd-dss:dss-jacoco-coverage 6.0 -...

Exploit for SQL Injection in Prestashop Blockwishlist

!Contributorscontributors-shieldcontributors-url !Fork...

Malicious code in fixer-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03586127d0f6a5b73a88127b68330d43a78f91cfb4e93944ec93e950ba96a19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3062 Malicious code in fixer-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03586127d0f6a5b73a88127b68330d43a78f91cfb4e93944ec93e950ba96a19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Command injection in eslint-fixer

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

@jheubuch/ng-ws-template (>=1.0.1, <=1.0.2), pg-generator (>=3.5.0, <=4.8.3) +1 more potentially affected by CVE-2021-26275 via eslint-fixer (0.1.5)

eslint-fixer NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on eslint-fixer and may be impacted: - @jheubuch/ng-ws-template =1.0.1, =3.5.0, =4.8.3 - pg-generator-react-template 0.1.0 Source cves: CVE-2021-26275 Source advisory:...

GHSA-45W5-PVR8-4RH5 Command injection in eslint-fixer

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

@jheubuch/ng-ws-template (>=1.0.1, <=1.0.2), pg-generator (>=3.5.0, <=4.8.3) +1 more potentially affected by CVE-2021-26275 via eslint-fixer (0.1.5)

eslint-fixer NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on eslint-fixer and may be impacted: - @jheubuch/ng-ws-template =1.0.1, =3.5.0, =4.8.3 - pg-generator-react-template 0.1.0 Source cves: CVE-2021-26275 Source advisory:...

Fedora: Security Advisory for mediaconch (FEDORA-2021-3b67623d93)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Arbitrary Code Execution

eslint-fixer is vulnerable to arbitrary code execution. The vulnerability exists through the lack of sanitization on the input to the childprocess.exec method...

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

CVE-2021-26275

The CVE-2021-26275 entry concerns the eslint-fixer package for Node.js, up to version 0.1.5. The root cause is command injection via shell metacharacters in the fix() function, enabling arbitrary code execution. Affected software is eslint-fixer (maintained by ozum) with repository reportedly del...

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

PT-2021-16985 · Unknown · Eslint-Fixer

Name of the Vulnerable Software and Affected Versions: eslint-fixer versions 0.1.5 and earlier Description: The issue allows command injection via shell metacharacters to the fix function. This affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repositor...

CVE-2021-26275: Improper Neutralization of Special Elements used in a Command

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

Fedora Update for mediaconch FEDORA-2019-7155125125

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...