Vulnerabilidades de Composer

CVE-2022-24086 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-20 16/02/2022

Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

CVE-2021-32648 Crítica · 9.1 KEV Urgente · 73 Exploit público CWE-287 26/08/2021

October CMS Improper Authentication

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5.

CVE-2021-21311 Alta · 7.2 KEV Alta · 69 Exploit público CWE-918 11/02/2021

Adminer Server-Side Request Forgery Vulnerability

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

CVE-2020-36193 Alta · 7.5 KEV Alta · 59 CWE-22 18/01/2021

PEAR Archive_Tar Improper Link Resolution Vulnerability

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

CVE-2021-3129 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware 12/01/2021

Laravel Ignition File Upload Vulnerability

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.

CVE-2020-13671 Alta · 8.8 KEV Alta · 62 Exploit público CWE-434 20/11/2020

Drupal core Un-restricted Upload of File

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.

CVE-2020-28949 Alta · 7.8 KEV Alta · 68 Exploit público 19/11/2020

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.

CVE-2020-11023 Média · 6.1 KEV Alta · 67 Exploit público CWE-79 29/04/2020

JQuery Cross-Site Scripting (XSS) Vulnerability

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2019-6340 Alta · 8.1 KEV Urgente · 76 Exploit público CWE-502 21/02/2019

Drupal Core Remote Code Execution Vulnerability

Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows PATCH or POST requests, or the site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7. (Note: The Drupal 7 Services module itself does not require an update at this time, but you should apply other contributed updates associated with this advisory if Services is in use.)

CVE-2018-7600 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-20 29/03/2018

Drupal Core Remote Code Execution Vulnerability

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

CVE-2017-9841 Crítica · 9.8 KEV Urgente · 75 Exploit público CWE-94 27/06/2017

PHPUnit Command Injection Vulnerability

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

CVE-2016-10033 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-88 30/12/2016

PHPMailer Command Injection Vulnerability

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.