EUVD-2025-135292

Malicious code in tray-pzp-pom npm...

Malicious code in tray-pzp-pom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3d753dfaab1f7cd55a51a5033f44d4199abc2c5be30266454b7849c230fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135293

Malicious code in tray-pzp-pom npm...

CVE-2025-57140

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...

CVE-2025-57140

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...

CVE-2025-57140

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...

CVE-2025-57140: Improper Neutralization of Special Elements used in an SQL Command

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...

CVE-2025-57140

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...

CVE-2025-57140

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...

CVE-2025-57140

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...

rsbi-pom 安全漏洞

rsbi-pom rsbi BI is a business intelligence system for the individual developers of rsbi BI. A security vulnerability exists in rsbi-pom version 4.7, which originates from the /bi/service/model/DatasetService path that is susceptible to SQL injection attacks...

PT-2025-35561

Name of the Vulnerable Software and Affected Versions: rsbi-pom version 4.7 Description: rsbi-pom version 4.7 is vulnerable to SQL Injection via the /bi/service/model/DatasetService API endpoint. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-2025-57140

The business intelligence system rsbi-pom version 4.7 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability is located in the /bi/service/model/DatasetService path (API endpoint). This flaw could allow an attacker to execute un...

Mysiteforme 安全漏洞

Mysiteforme is a permission management system for wangl1989 individual developers. A security vulnerability exists in Mysiteforme versions prior to v2025.01.01, which stems from the inclusion of a deserialization vulnerability discovered via the pom.xml configuration file...

org.jenkins-ci.main:jenkins-test-harness (1.423), org.jenkins-ci.main:jenkins-war (1.423) +4 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.423)

org.jenkins-ci.main:jenkins-core MAVEN version 1.423 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.423 - org.jenkins-ci.main:jenkins-war 1.423 -...

SUSE CVE-2021-26291

Apache Maven will follow repositories that are defined in a dependency's Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

Fedora: Security Advisory for fusesource-pom (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for plexus-pom (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for fasterxml-oss-parent (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for jackson-bom (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...