A vulnerability, which was classified as critical, has been found in node-tar up to 4.4.15/5.0.7/6.1.6. Affected by this issue is an unknown code. Upgrading to version 4.4.16, 5.0.8 or 6.1.7 eliminates this vulnerability.
node-tar up to 4.4.15/5.0.7/6.1.6 link following
Description Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the ‘id’ parameter at /pms/admin/prisons/view_prison.php:4 References
Description A vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) could allow an authenticated, local attacker