Command Injection

Overview sonar-wrapper is a package that wraps SonarQube Scanner as a node module. Affected versions of this package are vulnerable to Command Injection. The injection point is located in lib/sonarRunner.js. PoC var root = require"sonar-wrapper"; var options= 'sonar.projectName':'& touch JHU';...

PT-2020-5601

Name of the Vulnerable Software and Affected Versions openjpeg versions prior to 2.4.0 Description A flaw was found in openjpeg's src/lib/openjp2/t2.c, allowing an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from...

Prototype Pollution

Overview mquery is an Expressive query building for MongoDB Affected versions of this package are vulnerable to Prototype Pollution via the merge function within lib/utils.js. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program. PoC...

CVE-2020-35149

lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property e.g., proto can be copied during a merge or clone operation...

CVE-2020-35149

lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property e.g., proto can be copied during a merge or clone operation...

Command Injection

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Command Injection via the lib/utils.js file, which is required by main entry of the package. Note: CVE-2020-28432 has been retracted because it was found to be invalid. Further investigatio...

UBUNTU-CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

CVE-2020-35149: Undefined Security Weakness

lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property e.g., proto can be copied during a merge or clone operation...

CVE-2020-35132: Improper Neutralization of Input During Web Page Generation

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

PT-2020-17268

Name of the Vulnerable Software and Affected Versions mquery versions prior to 3.2.3 Description The issue allows a pollution attack because a special property, such as proto , can be copied during a merge or clone operation. This occurs in the lib/utils.js file. Recommendations For versions prio...

CVE-2020-28938

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

CVE-2020-28938

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

CVE-2020-28938: Improper Neutralization of Input During Web Page Generation

OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...

PT-2020-17064

Name of the Vulnerable Software and Affected Versions OpenClinic version 0.8.2 Description The issue is a stored XSS vulnerability in lib/Check.php, allowing users to force actions on behalf of other users. Recommendations For OpenClinic version 0.8.2, consider restricting access to the...

OpenClinic Cross-Site Scripting Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A cross-site scripting vulnerability exists in OpenClinic version 0.8.2, which stems from the effects of an XSS vulnerability stored in...

CVE-2020-28977: Server-Side Request Forgery (SSRF)

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF...

PT-2020-17074

Name of the Vulnerable Software and Affected Versions Canto plugin version 1.3.0 for WordPress Description The issue allows an unauthenticated attacker to make a request to any internal and external server via the /includes/lib/detail.php endpoint with the subdomain variable set to SSRF. This...

PT-2020-17076

Name of the Vulnerable Software and Affected Versions Canto plugin version 1.3.0 for WordPress Description The issue allows an unauthenticated attacker to make a request to any internal and external server via the /includes/lib/tree.php endpoint with the subdomain variable set to SSRF. This enabl...

PT-2020-17075

Name of the Vulnerable Software and Affected Versions Canto plugin version 1.3.0 for WordPress Description The issue allows an unauthenticated attacker to make a request to any internal and external server via the /includes/lib/get.php endpoint with the subdomain variable set to SSRF. This enable...