CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

Sql injection

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

Arbitrary Code Execution in eslint-utils

Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...

GHSA-3GX7-XHV7-5MX3 Arbitrary Code Execution in eslint-utils

Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...

CVE-2019-15558

CVE-2019-15558 affects XM^online 2 Common Utils and Endpoints 0.2.1. The vulnerability is a SQL injection tied to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. CVSS metrics from NVD indicate a NETWORK-exposed, LOW-complexity attack with HIGH confidentiality, integrity, a...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

Arbitrary Code Execution

eslint-utils is vulnerable to arbitrary code execution. A lack of validation results in a prototype pollution vulnerability in the getStaticValue function which would allow an attacker to execute arbitrary code...

apm-agent-utils (>=1.0.3 <=1.3.0), enochecker (>=0.0.5 <=0.0.9) +1 more potentially affected by CVE-2019-7617 via elastic-apm (>=4.2.2 <=5.10.1)

elastic-apm PYPI version =4.2.2, =1.0.3, =0.0.5, =0.0.14, =0.0.24.post2 Source cves: CVE-2019-7617 Source advisory: OSV:PYSEC-2019-178...

Arbitrary Code Execution

Overview Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName...

NewStart CGSL MAIN 4.05 : yum-utils Vulnerability (NS-SA-2019-0133)

The remote NewStart CGSL host, running version MAIN 4.05, has yum-utils packages installed that are affected by a vulnerability: - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacke...

NewStart CGSL CORE 5.04 / MAIN 5.04 : yum-utils Vulnerability (NS-SA-2019-0024)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has yum-utils packages installed that are affected by a vulnerability: - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. I...

The vulnerability of the PDF to HTML conversion tool, pdftohtml, related to the manipulation of the zero pointer, allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the PDF document conversion tool pdftohtml, which is part of the poppler-utils package, relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure in the application or execute arbitrary code by entering a...

Cross-site Scripting (XSS)

nifi-web-utils is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the request attribute value...

OracleVM 3.3 / 3.4 : bind (OVMSA-2019-0027)

The remote OracleVM system is missing necessary patches to address critical security updates : - Use only selected documentation files - Fix CVE-2018-5743 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2019-0027...

rhn-tools:1.0 bug fix update

An update is available for osad, spacewalk-abrt, rhn-custom-info, rhncfg, spacewalk-oscap, spacewalk-backend, rhn-virtualization, spacewalk-usix, rhnpush, spacewalk-client-cert, cobbler. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

@condor-labs/metrics (>=1.3.0 <=1.3.5), zation (>=0.6.5 <=0.7.0) +3 more potentially affected by unknown CVE via node-os-utils (=1.0.7)

node-os-utils NPM version =1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-os-utils and may be impacted: - @condor-labs/metrics =1.3.0, =0.6.5, =0.7.4, =0.2.2, =0.2.3 - zation-service-nodemailer =0.1.2 Source cves: unknown CVE Source advisor...

GHSA-J9F8-8H89-J69X Remote Code Execution in node-os-utils

Versions of node-os-utils prior to 1.1.0 are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution. Recommendation Upgrade to version 1.1.0 or later...

Remote Code Execution in node-os-utils

Versions of node-os-utils prior to 1.1.0 are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution. Recommendation Upgrade to version 1.1.0 or later...

PT-2019-6871 · Chicken +1 · Chicken +1

Name of the Vulnerable Software and Affected Versions: Chicken versions prior to 4.9.0 Description: The issue is related to an OS command injection vulnerability in the qs procedure from the utils module. Recommendations: For versions prior to 4.9.0, update to version 4.9.0 or later to resolve th...

EulerOS Virtualization 3.0.1.0 : scsi-target-utils (EulerOS-SA-2019-1427)

According to the versions of the scsi-target-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflows in the iSNS implementation in isns.c in 1 Linux SCSI target framework aka tgt or...