5 matches found
Malicious code in db-dx-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeeef7d309b24e00c0e45df8736d1d8b8d279207d2bfa766c75890815e5382d db-dx-connector is a name-swap typosquat of the legitimate dx-db-connector package the package's own repository, bugs, and homepage fields all point ...
MAL-2026-5463 Malicious code in db-dx-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeeef7d309b24e00c0e45df8736d1d8b8d279207d2bfa766c75890815e5382d db-dx-connector is a name-swap typosquat of the legitimate dx-db-connector package the package's own repository, bugs, and homepage fields all point ...
Linux Distros Unpatched Vulnerability : CVE-2018-11039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request...
DEBIAN-CVE-2018-11039
Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...
UBUNTU-CVE-2018-11039
Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...