com.adobe.documentservices:pdfservices-sdk (>=2.0.0, <=2.2.0), com.adobe.documentservices:pdftools-sdk (>=1.1.0, <=1.3.0) +484 more potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (>=6.1.0.final, <=6.1.4.final)

org.hibernate:hibernate-validator MAVEN version =6.1.0.final, =2.0.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0, =0.0.1, =1.0.14.2, =2.0, =2.0, =2.0, =2.1 and more Source cves: CVE-2020-10693 Source advisory: MEND:CVE-2020-10693...

CVE-2020-10693

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

slp-validate Input Validation Error Vulnerability

slp-validate is a lightweight SLP Simple Ledger Protocol validator with features such as pre-broadcast validation and burn protection. An input validation error vulnerability exists in slp-validate. The vulnerability stems from a network system or product that does not properly validate incoming...

CVE-2020-10693: Improper Input Validation

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

PT-2020-12288

Name of the Vulnerable Software and Affected Versions Hibernate Validator version 6.1.2.Final Description A flaw was found in the message interpolation processor of Hibernate Validator, enabling invalid EL expressions to be evaluated as if they were valid. This allows attackers to bypass input...

CVE-2020-10693

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

FlightCrew EPUB Validator Arbitrary File Write

The vulnerability of the EPUB validator FlightCrew is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to write arbitrary files into any directory within a Zip archive...

form-validator (0.0.11), heightline (1.0.1) +4 more potentially affected by CVE-2020-11022 via jquery (1.6.2)

jquery NPM version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on jquery and may be impacted: - form-validator 0.0.11 - heightline 1.0.1 - jsgrep =1.0.0, =0.1.61, =0.0.9, =0.0.15 - zappa 0.2.0 Source cves: CVE-2020-11022 Source advisory:...

CVE-2020-11885

WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user with admin console access can use the XML validator to make unintended network invocations such as SSRF via an uploaded file...

Design/Logic Flaw

WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user with admin console access can use the XML validator to make unintended network invocations such as SSRF via an uploaded file...

Malicious Package

Overview activemodel-ipaddr-validator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid usin...

Malicious Package

Overview attr-validator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using attr-validat...

Malicious Package

Overview active-modeltypevalidator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview abn-validator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using abn-validator...

Malicious Package

Overview at-leastoneexistencevalidator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid usi...

Malicious Package

Overview age-validator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using age-validator...

Malicious Package

Overview address-validator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview active-comparisonvalidator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview activemodel-can-validator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

CVE-2020-11885: Improper Restriction of XML External Entity Reference

WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user with admin console access can use the XML validator to make unintended network invocations such as SSRF via an uploaded file...