Sql injection

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

GHSA-3GX7-XHV7-5MX3 Arbitrary Code Execution in eslint-utils

Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...

Arbitrary Code Execution in eslint-utils

Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

CVE-2019-15558

CVE-2019-15558 affects XM^online 2 Common Utils and Endpoints 0.2.1. The vulnerability is a SQL injection tied to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. CVSS metrics from NVD indicate a NETWORK-exposed, LOW-complexity attack with HIGH confidentiality, integrity, a...

PT-2019-14325

Name of the Vulnerable Software and Affected Versions eslint-utils versions 1.2.0 through 1.4.0 Description The issue concerns the execution of arbitrary code due to improper sanitization of user input by the getStaticValue function. This allows attackers to supply malicious input that executes...

CVE-2019-15558: Improper Neutralization of Special Elements used in an SQL Command

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

CVE-2019-15657: Undefined Security Weakness

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

PT-2019-14274

Name of the Vulnerable Software and Affected Versions XM^online 2 Common Utils and Endpoints version 0.2.1 Description The issue allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. Recommendations For version 0.2.1, at the moment, there is no...

Arbitrary Code Execution

eslint-utils is vulnerable to arbitrary code execution. A lack of validation results in a prototype pollution vulnerability in the getStaticValue function which would allow an attacker to execute arbitrary code...

Arbitrary Code Execution

Overview Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName...

NewStart CGSL CORE 5.04 / MAIN 5.04 : yum-utils Vulnerability (NS-SA-2019-0024)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has yum-utils packages installed that are affected by a vulnerability: - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. I...

NewStart CGSL MAIN 4.05 : yum-utils Vulnerability (NS-SA-2019-0133)

The remote NewStart CGSL host, running version MAIN 4.05, has yum-utils packages installed that are affected by a vulnerability: - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacke...

co.paralleluniverse:comsat-test-utils (0.2.0), io.undertow:undertow-websockets-jsr (1.1.0.beta5) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.0.beta5)

io.undertow:undertow-servlet MAVEN version 1.1.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - co.paralleluniverse:comsat-test-utils 0.2.0 - io.undertow:undertow-websockets-jsr 1.1.0.beta5...

com.opensearchserver:oss-java-client (1.0.0), com.opensearchserver:oss-utils (1.0.0) +62 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.2.final)

io.undertow:undertow-servlet MAVEN version 1.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - com.opensearchserver:oss-java-client 1.0.0 - com.opensearchserver:oss-utils 1.0.0 -...

pdftohtml Heap Buffer Overflow DoS

The vulnerability of the PDF document conversion tool pdftohtml, which is part of the poppler-utils package, relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure in the application or execute arbitrary code by entering a...

Cross-site Scripting (XSS)

nifi-web-utils is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the request attribute value...

OracleVM 3.3 / 3.4 : bind (OVMSA-2019-0027)

The remote OracleVM system is missing necessary patches to address critical security updates : - Use only selected documentation files - Fix CVE-2018-5743 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2019-0027...

rhn-tools:1.0 bug fix update

An update is available for osad, spacewalk-abrt, rhn-custom-info, rhncfg, spacewalk-oscap, spacewalk-backend, rhn-virtualization, spacewalk-usix, rhnpush, spacewalk-client-cert, cobbler. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detail...