8822 matches found
de.viadee:viadeeprocessapplicationvalidator (>=2.2.3, <=2.4.0) potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (6.0.3)
com.cronutils:cron-utils MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - de.viadee:viadeeprocessapplicationvalidator =2.2.3, =2.4.0 Source cves: CVE-2020-26238 Source advisory:...
com.spotify:styx-api-service (>=1.0.77, <=2.1.72), com.spotify:styx-cli-unshaded (>=2.1.45, <=2.1.72) +8 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (7.0.0)
com.cronutils:cron-utils MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.spotify:styx-api-service =1.0.77, =2.1.45, =1.0.77, =1.0.77, =2.1.45, =1.0.77, =1.0.77, =2.1.16, =1.0.77,...
com.thinkbiganalytics.kylo.plugins:kylo-sla-email (>=0.9.1, <=0.10.0), com.thinkbiganalytics.kylo:kylo-metadata-modeshape (0.9.1) +1 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (2.0.0)
com.cronutils:cron-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.thinkbiganalytics.kylo.plugins:kylo-sla-email =0.9.1, =0.9.1, =0.10.0 Source cves: CVE-2020-26238 Source...
pl.touk.nussknacker:nussknacker-management-sample_2.11 (>=0.1.0, <=0.3.0), pl.touk.nussknacker:nussknacker-management-sample_2.12 (>=0.1.0, <=0.3.0) +2 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (3.1.1)
com.cronutils:cron-utils MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - pl.touk.nussknacker:nussknacker-management-sample2.11 =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.2 Source cves:...
com.elastisys:autoscaler.core (5.2.2), com.elastisys:autoscaler.distro.standard (5.2.2) +69 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (5.0.5)
com.cronutils:cron-utils MAVEN version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.elastisys:autoscaler.core 5.2.2 - com.elastisys:autoscaler.distro.standard 5.2.2 -...
com.github.anilganipineni:scheduler (>=0.1, <=0.4), com.github.shijingsh:shijingsh-ai-core (1.0.0) +29 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (8.0.0)
com.cronutils:cron-utils MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.github.anilganipineni:scheduler =0.1, =0.4 - com.github.shijingsh:shijingsh-ai-core 1.0.0 -...
CVE-2020-26238: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before version 9.1.3, a template Injection vulnerability is present. This enables attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote...
PT-2020-16799
Name of the Vulnerable Software and Affected Versions xdg-utils versions 1.1.0-rc1 and newer Description A flaw was found in the xdg-email component. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could...
PT-2020-16366
Name of the Vulnerable Software and Affected Versions cron-utils versions prior to 9.1.3 Description A template injection vulnerability is present in cron-utils, enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution RCE vulnerability. This...
Fedora 32 : cifs-utils (2020-cfdd73f1b4)
New upstream release : - fixes CVE-2020-14342 cifs-utils: shell command injection in mount.cifs - adds smb2-quota tool - adds mount.smb3 as a symlink to mount.cifs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...
Fedora 33 : cifs-utils (2020-ea0b9caac3)
New upstream release : - fixes CVE-2020-14342 cifs-utils: shell command injection in mount.cifs - adds smb2-quota tool - adds mount.smb3 as a symlink to mount.cifs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...
3nit-utils (0.24.0), @8base/api-cli (>=0.0.1, <=0.1.0) +346 more potentially affected by CVE-2020-7769 via nodemailer (>=6.0.0, <=6.4.15)
nodemailer NPM version =6.0.0, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =1.2.1, =0.16.9, =0.17.0 - @agnostack/sync-moltin-to-shipstation 1.0.0 and more Source cves: CVE-2020-7769 Source advisory: SNYK:JS-NODEMAILER-1038834...
Fedora: Security Advisory for cifs-utils (FEDORA-2020-ea0b9caac3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for cifs-utils (FEDORA-2020-cfdd73f1b4)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-0418
In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813...
CVE-2020-14342 affecting package cifs-utils 6.8-6
CVE-2020-14342 affecting package cifs-utils 6.8-6. A patched version of the package is available...
cloud-utils-growpart bug fix and enhancement update
An update is available for cloud-utils-growpart. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...
new module: perl:5.30
An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...
