Malicious Package in wallet-address-validtaor

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in wallet-address-vaildator

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

CVE-2020-14385

A flaw was found in the Linux kernel. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leadi...

JAXP XMLSchemaValidator Data Access

The vulnerability of the XMLSchemaValidator class in the JAXP component of the WildFly software framework JBoss Application Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely gain access to read, modify, add, or delete data usi...

Important: Red Hat Security Advisory: Red Hat build of Thorntail 2.7.1 security and bug fix update

An update is now available for Red Hat build of Thorntail. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

hibernate-validator: Improper input validation in the interpolation of constraint error messages

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

Malicious Package in oauth-validator

Version 1.0.2 of oauth-validator contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found installed you...

GHSA-CXCF-78MR-WPG7 Malicious Package in oauth-validator

Version 1.0.2 of oauth-validator contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found installed you...

PT-2020-21257

Name of the Vulnerable Software and Affected Versions oauth-validator version 1.0.2 Description The issue concerns malicious code in version 1.0.2 of the oauth-validator module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and...

GHSA-F5W6-R7RG-MCGQ Regular Expression Denial of Service in validator

Versions of validator prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the isURL method. Recommendation Update to version 3.22.1 or later...

47pages-keystone (>=0.0.1, <=0.0.5), @amitport/koangular-users (0.0.0) +363 more potentially affected by CVE-2014-8882 via validator (>=3.1.0, <=3.19.1)

validator NPM version =3.1.0, =0.0.1, =0.0.1, =0.3.21-3, =0.3.1-integration, =1.7.99, =9.7.4, =0.6.0, =1.0.0, =0.0.1, =0.0.3 and more Source cves: CVE-2014-8882 Source advisory: OSV:GHSA-F5W6-R7RG-MCGQ...

Regular Expression Denial of Service in validator

Versions of validator prior to 3.22.1 are affected by a regular expression denial of service vulnerability in the isURL method. Recommendation Update to version 3.22.1 or later...

47pages-keystone (>=0.0.1, <=0.0.5), @amitport/koangular-users (0.0.0) +363 more potentially affected by CVE-2014-8882 via validator (>=3.1.0, <=3.19.1)

validator NPM version =3.1.0, =0.0.1, =0.0.1, =0.3.21-3, =0.3.1-integration, =1.7.99, =9.7.4, =0.6.0, =1.0.0, =0.0.1, =0.0.3 and more Source cves: CVE-2014-8882 Source advisory: GHSA-F5W6-R7RG-MCGQ...

PT-2020-7758

Name of the Vulnerable Software and Affected Versions validator versions prior to 3.22.1 Description The issue is related to a regular expression denial of service vulnerability in the isURL method. Recommendations Update to version 3.22.1 or later...

CVE-2020-15639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Authentication is not required to exploit this vulnerability. The specific flaw exists within the decryptFile method of the FlashValidatorServiceImpl class. The iss...

hibernate-validator: Improper input validation in the interpolation of constraint error messages

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

hibernate-validator: Improper input validation in the interpolation of constraint error messages

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

hibernate-validator: Improper input validation in the interpolation of constraint error messages

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

hibernate-validator: Improper input validation in the interpolation of constraint error messages

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

hibernate-validator: Improper input validation in the interpolation of constraint error messages

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...