EUVD-2017-16271

Malware in sbrugna...

Ninka Security Bypass Vulnerability

Ninka is a set of source code license identification tools. A security vulnerability exists in Ninka versions prior to 1.3.2. It can be exploited by remote attackers to obtain sensitive information or cause a denial of service process hang by means of a specially crafted filename...

CVE-2017-7239

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

Code injection

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

CVE-2017-7239

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

CVE-2017-7239

Removed by vendor...

CVE-2017-7239

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

CVE-2017-7239

CVE-2017-7239 affects Ninka before 1.3.2. A crafted filename can allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a DoS (process hang). The NVD notes a high/critical impact profile (CVSS v2 base 7.5, v3 base 9.8). Remediation suggested b...

CVE-2017-7239

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

CVE-2017-7239: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

PT-2017-17600

Name of the Vulnerable Software and Affected Versions Ninka versions prior to 1.3.2 Description The issue might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service via a crafted filename. Recommendations For versions pri...