Skip to content
OpenAdvisories

Archive

13 September 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8

    JHipster Kotlin using insecure source of randomness `RandomStringUtils` before v1.2.0

    A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils). This allows an attacker (if able to obtain their own password rese…

  • Critical 10.0
    CVE-2019-5485 Public exploit EPSS 59%

    Command Injection in gitlabhook

    NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.