CVE-2022-43396 Apache Kylin: Command injection by Useless configuration

In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can control the command by controlling the kylin.engine.spark-cmd parameter of conf...

PT-2014-1957

Name of the Vulnerable Software and Affected Versions Junos versions 11.4 through 11.4R10 Junos versions 12.1X44 through 12.1X44-D33 Junos versions 12.1X45 through 12.1X45-D24 Junos versions 12.1X46 through 12.1X46-D19 Junos versions 12.1X47 through 12.1X47-D9 Description A cross-site scripting X...