Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Kajam Project Subscribe
Filtered by product Kajam
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-4999 1 Kajam Project 1 Kajam 2018-01-30 2.1 LOW 7.8 HIGH
vendor/plugins/dataset/lib/dataset/database/mysql.rb in the kajam gem 1.0.3.rc2 for Ruby places the mysql user password on the (1) mysqldump command line in the capture function and (2) mysql command line in the restore function, which allows local users to obtain sensitive information by listing the process.