get-npm-package-version 命令注入漏洞

get-npm-package-version is a package for hoperyy individual developers. It is used to get the npm package version. A command injection vulnerability exists in get-npm-package-version before 1.0.7, which is caused by command injection via the main function in index.js...

PT-2022-9062 · Unknown · Get-Npm-Package-Version

Name of the Vulnerable Software and Affected Versions: get-npm-package-version versions prior to 1.0.7 Description: The issue concerns Command Injection via the main function in index.js. Recommendations: For versions prior to 1.0.7, update to version 1.0.7 or later to resolve the issue. As a...

CVE-2020-28438

This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js...

Command injection

This affects all versions of package google-cloudstorage-commands...

CVE-2022-2207 affecting package vim for versions less than 8.2.5172-1

CVE-2022-2207 affecting package vim for versions less than 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21479 affecting package mysql for versions less than 8.0.29-1

CVE-2022-21479 affecting package mysql for versions less than 8.0.29-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32296 affecting package kernel for versions less than 5.15.48.1-2

CVE-2022-32296 affecting package kernel for versions less than 5.15.48.1-2. A patched version of the package is available...

AZL-9978 CVE-2022-2208 affecting package vim for versions less than 8.2.5172-1

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163...

GHSA-GPW4-7MCW-M8VX Cross-site Scripting in Jenkins Package Version Plugin

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability requires...

Cross-site Scripting in Jenkins Package Version Plugin

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability requires...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross site scripting

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

CVE-2022-34193 relates to the Jenkins Package Version Plugin (versions ≤ 1.0.1). The issue is a stored XSS vulnerability: the plugin does not escape the name of Package version parameters on views displaying parameters, enabling an attacker with Item/Configure permission to inject script. The con...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

PT-2022-22062 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Package Version Plugin versions 1.0.1 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the Jenkins Package Version Plugin does not escape the name of Package version parameters ...

CVE-2021-28957 affecting package python-lxml for versions less than 4.8.0-1

CVE-2021-28957 affecting package python-lxml for versions less than 4.8.0-1. An upgraded version of the package is available that resolves this issue...

Slackware: Security Advisory (SSA:2016-141-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21297 affecting package mysql for versions less than 8.0.28-1

CVE-2022-21297 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...