SUSE SLES15 / openSUSE 15 Security Update : nodejs20 (SUSE-SU-2024:2543-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2543-1 advisory. Update to 20.15.1: - CVE-2024-36138: Fixed CVE-2024-27980 fix bypass bsc1227560 - CVE-2024-22020: Fixed a bypass of...

Command injection

FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMANDPATTERN and TESTRUNNER in the pageContent parameter when editing a page...

CVE-2014-1216

CVE-2014-1216 affects FitNesse Wiki versions including 20131110 and 20140201 and earlier. The flaw allows remote command execution by crafting pageContent with a COMMAND_PATTERN and TEST_RUNNER during page editing, enabling an attacker to run arbitrary commands on the server. Multiple public advi...