CVE-2022-37108

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab...

EUVD-2022-39761

Malicious code in bioql PyPI...

CVE-2022-37108

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab...

CVE-2022-37108

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab...

CVE-2022-37108

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab...

Design/Logic Flaw

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab...

CVE-2022-37108

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab...

CVE-2022-37108

Summary: CVE-2022-37108 is an injection vulnerability in the syslog-ng configuration wizard of Securonix Snypr 6.4. An application user with the Manage Ingesters permission can coerce remote ingesters to execute arbitrary code by appending text to system-executed files (e.g., crontab entries). Te...

PT-2022-23817 · Securonix +1 · Securonix Snypr +1

Name of the Vulnerable Software and Affected Versions: Securonix Snypr versions prior to 6.4 Jun 2022 R3 Description: An injection vulnerability in the syslog-ng configuration wizard allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by...

CVE-2022-37108: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab...

Securonix SNYPR injection vulnerability

Securonix SNYPR is an open, modular, next-generation security intelligence platform from Securonix, Inc. that combines log management, security information and events. A security vulnerability exists in Securonix SNYPR version 6.4, which stems from the syslog-ng configuration wizard that allows a...

com.pengyifan.pubtator:pengyifan-pubtator (0.0.1), edu.jhu.hlt:concrete-ingesters-acere (4.8.6) potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (3.5.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.pengyifan.pubtator:pengyifan-pubtator 0.0.1 - edu.jhu.hlt:concrete-ingesters-acere 4.8.6...

com.pengyifan.pubtator:pengyifan-pubtator (0.0.1), edu.jhu.hlt:concrete-ingesters-acere (4.8.6) potentially affected by CVE-2021-3878 via edu.stanford.nlp:stanford-corenlp (3.5.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.pengyifan.pubtator:pengyifan-pubtator 0.0.1 - edu.jhu.hlt:concrete-ingesters-acere 4.8.6...

com.pengyifan.pubtator:pengyifan-pubtator (0.0.1), edu.jhu.hlt:concrete-ingesters-acere (4.8.6) potentially affected by CVE-2021-44550 via edu.stanford.nlp:stanford-corenlp (3.5.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.pengyifan.pubtator:pengyifan-pubtator 0.0.1 - edu.jhu.hlt:concrete-ingesters-acere 4.8.6...

com.pengyifan.pubtator:pengyifan-pubtator (0.0.1), edu.jhu.hlt:concrete-ingesters-acere (4.8.6) potentially affected by CVE-2022-0239 via edu.stanford.nlp:stanford-corenlp (3.5.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.pengyifan.pubtator:pengyifan-pubtator 0.0.1 - edu.jhu.hlt:concrete-ingesters-acere 4.8.6...

com.pengyifan.pubtator:pengyifan-pubtator (0.0.1), edu.jhu.hlt:concrete-ingesters-acere (4.8.6) potentially affected by CVE-2022-0198 via edu.stanford.nlp:stanford-corenlp (3.5.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.pengyifan.pubtator:pengyifan-pubtator 0.0.1 - edu.jhu.hlt:concrete-ingesters-acere 4.8.6...