Lucene search
+L

5000 matches found

OSV
OSV
•added 2021/11/16 9:14 a.m.•7 views

SUSE-SU-2021:3665-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries position independent basc1185132. - Upgrade to 9.0.18 bsc1189363 build: remove rpm related targets drbdsetup,v84: fix minor compile warnings systemd: resource specific activation systemd: drbd-reactor promoter templates do...

7.1AI score
SaveExploits0References4
Veracode
Veracode
•added 2021/11/16 3:47 a.m.•26 views

Template Injection

cron-utils is vulnerable to template injection. An attacker can inject arbitrary java EL expressions through the parse function in CronParser.java, leading to remote code execution...

10CVSS6.2AI score0.04349EPSS
SaveExploits1References5Affected Software1
OPENSUSE Linux
OPENSUSE Linux
•added 2021/11/16 12:00 a.m.•114 views

Security update for drbd-utils (low)

openSUSE Security Update: Security update for drbd-utils Announcement ID: openSUSE-SU-2021:3665-1 Rating: low References: 1029961 1185132 1189363 SLE-21057 Affected Products: openSUSE Leap 15.3 An update that contains security fixes and contains one feature can now be installed. Description: This...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/11/15 11:27 p.m.•37 views

Critical vulnerability found in cron-utils

Impact A Template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution RCE vulnerability. Versions up to 9.1.2 are susceptible to this vulnerability. Please note, that only projects using the @Cron...

10CVSS2.7AI score0.04349EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2021/11/15 9:15 p.m.•44 views

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

10CVSS0.04349EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/11/15 9:15 p.m.•13 views

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

10CVSS7AI score0.04349EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2021/11/15 9:15 p.m.•29 views

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

9.8CVSS7.8AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2021/11/15 8:30 p.m.•59 views

CVE-2021-41269 Unauthenticated remote code injection in cron-utils

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

10CVSS10AI score0.04349EPSS
SaveExploits1References4
CVE
CVE
•added 2021/11/15 8:30 p.m.•236 views

CVE-2021-41269

CVE-2021-41269 affects cron-utils, a Java library for parsing and migrating cron expressions. The issue is a template injection flaw in cron-utils that enables an attacker to inject arbitrary Java EL expressions, leading to unauthenticated remote code execution. The vulnerability affects versions...

10CVSS9.8AI score0.04349EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/15 12:00 a.m.•1 views

CVE-2021-41269: Improper Control of Generation of Code

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

10CVSS5.8AI score0.04349EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/15 12:00 a.m.•13 views

Cron Utils 代码注入漏洞

Cron Utils is Jmrozanec individual developers of a Java code base for validating , parsing , migrating Cron expressions . A code injection vulnerability exists in Cron Utils that allows an attacker to inject arbitrary Java EL expressions to execute remote code...

10CVSS8.9AI score0.04349EPSS
SaveExploits1References10
OpenVAS
OpenVAS
•added 2021/11/14 12:00 a.m.•23 views

Fedora: Security Advisory for dmtx-utils (FEDORA-2021-df1fa3d3e0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2021/11/12 12:38 a.m.•20 views

[SECURITY] Fedora 35 Update: dmtx-utils-0.7.6-9.fc35.1

libdmtx is open source software for reading and writing Data Matrix 2D bar-codes on Linux, Unix, OS X, Windows, and mobile devices. At its core libdmtx is a shared library, allowing C/C++ programs to use its capabilities without restrictions or overhead. The included utility programs, dmtxread an...

7.5AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2021/11/09 5:34 p.m.•10 views

Low: Red Hat Bug Fix Advisory: iscsi-initiator-utils bug fix and enhancement update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 8. For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section...

7.5CVSS6.8AI score0.03259EPSS
SaveExploits0References2
Rockylinux
Rockylinux
•added 2021/11/09 9:22 a.m.•22 views

iscsi-initiator-utils bug fix and enhancement update

An update is available for iscsi-initiator-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

2.1AI score
SaveExploits0
OSV
OSV
•added 2021/11/09 9:22 a.m.•20 views

ALBA-2021:4445 fcoe-utils bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
Rockylinux
Rockylinux
•added 2021/11/09 9:22 a.m.•25 views

fcoe-utils bug fix and enhancement update

An update is available for fcoe-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.1AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2021/11/09 9:22 a.m.•25 views

fcoe-utils bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
Rockylinux
Rockylinux
•added 2021/11/09 9:19 a.m.•16 views

shadow-utils bug fix and enhancement update

An update is available for shadow-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.1AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2021/11/09 9:19 a.m.•20 views

shadow-utils bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0
Rows per page
Query Builder