CVE-2017-7536

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the...

UBUNTU-CVE-2017-7536

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the...

CVE-2017-7536

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the...

am.ik.home:uaa-server (>=1.3.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +1879 more potentially affected by CVE-2017-7536 via org.hibernate:hibernate-validator (>=5.3.0.final, <=5.3.5.final)

org.hibernate:hibernate-validator MAVEN version =5.3.0.final, =1.3.0, =0.9.6, =0.0.1, =0.2.0, =1.0.3, =1.0.6, =0.2.1, =1.0.1, =1.2, =1.5 and more Source cves: CVE-2017-7536 Source advisory: MEND:CVE-2017-7536...

at.researchstudio.sat:won-owner-webapp (0.3), at.yawk.dropwizard-nagios:dropwizard-nagios (1.0) +716 more potentially affected by CVE-2017-7536 via org.hibernate:hibernate-validator (>=5.4.0.final, <=5.4.1.final)

org.hibernate:hibernate-validator MAVEN version =5.4.0.final, =2.6.0, =2.6.0, =3.4.0, =3.6.0, =2.4, =3.5.0, =1.0.0.final, =2.5.4, =0.8.0, =0.9.2 - com.arpnetworking:artemis2.11 0.1.7 - com.bendb.dropwizard:dropwizard-jooq 1.2.0-0 and more Source cves: CVE-2017-7536 Source advisory:...

am.ik.home:uaa-server (>=1.0.0, <=1.2.0), at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8) +2703 more potentially affected by CVE-2017-7536 via org.hibernate:hibernate-validator (>=5.2.0.final, <=5.2.4.final)

org.hibernate:hibernate-validator MAVEN version =5.2.0.final, =1.0.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1, =1, =10 and more Source cves: CVE-2017-7536 Source advisory: MEND:CVE-2017-7536...

CVE-2017-7536

CVE-2017-7536 affects Hibernate Validator 5.2.x (before 5.2.5), 5.3.x, and 5.4.x. If the security manager’s reflective permissions are granted to Hibernate Validator, a privilege escalation can occur by allowing access to private members, enabling reading private member values via ConstraintViola...

CVE-2017-7536

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the...

CVE-2017-7536

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the...

CVE-2017-7536: DEPRECATED: Authentication Bypass Issues

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the...

PT-2018-8401

Name of the Vulnerable Software and Affected Versions Hibernate Validator versions 5.2.x through 5.2.4, 5.3.x through 5.3.5, and 5.4.x through 5.4.1 Description A potential privilege escalation issue was found in Hibernate Validator when the security manager's reflective permissions are granted,...

Web Reconnaissance Framework: Recon-ng

Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can...

address-validator.net XSS vulnerability

Open Bug Bounty ID: OBB-457890 Description| Value ---|--- Affected Website:| address-validator.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hibernate-validator: Privilege escalation when running under the security manager

It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...

hibernate-validator: Privilege escalation when running under the security manager

It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...

SUSE-SU-2017:3253-1 Fixing security issues on OBS toolchain

This OBS toolchain update fixes the following issues: Package 'build': - CVE-2010-4226: force use of bsdtar for VMs bnc665768 - CVE-2017-14804: Improve file name check extractbuild bsc1069904 - switch baselibs scheme for debuginfo packages from foo-debuginfo-32bit to foo-32bit-debuginfo fate32321...

PT-2018-8496

Name of the Vulnerable Software and Affected Versions obs-service-source validator versions prior to 0.7 Description A shell command injection issue exists in the handling of RPM SPEC files with specific macro constructs, potentially allowing code execution as the packager. Recommendations For...

Arbitrary Code Execution

swagger-parser is susceptible to arbitrary code execution attacks. It does not use a safe parsing method in both the readYamlTree and readYamlValue functions of swagger-parser, allowing malicious YAML files from untrusted remote sources to be parsed to the applications. All the online code...

hibernate-validator: Privilege escalation when running under the security manager

It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7451 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7451 Source advisory: GHSA-QPJP-7RP2-9C3F...