Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/brbackup@0.1.1
purl pkg:gem/brbackup@0.1.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.5
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2014-5004

Plaintext Password Disclosure The program exposes password information in plaintext in the process list. This may allow a local attacker … There are no reported fixed by versions.
OSVDB-108900

dbuser Variable Shell Metacharacter Injection Remote Command Execution This package contains a flaw that is triggered as input passed via … There are no reported fixed by versions.
OSVDB-108899

SQL Injection This package contains a flaw that may allow carrying out an SQL injection attack. The issue is due … There are no reported fixed by versions.
GHSA-vqcm-7f7f-r539
Aliases:
CVE-2014-5004
brbackup exposes database password to unauthorized users lib/brbackup.rb in the brbackup gem 0.1.1 for Ruby places the database password on … There are no reported fixed by versions.
This package is not known to fix any advisories.