Giter Club home page Giter Club logo

informix-text-exporter's People

Contributors

mend-bolt-for-github[bot] avatar spokeywheeler avatar wwatw avatar

Stargazers

 avatar  avatar  avatar

Watchers

 avatar  avatar  avatar

informix-text-exporter's Issues

Is my database in a usable state?

Time to resurrect this. What metrics do I want?

First and foremost: is the database in a usable state? How do I define that?

My best definition at the moment is: can I connect to the database, second, can I (re?)write a row to a table (and/or delete it)?

Because I can't be sure a given database exists and I can't assume database creation permission exists and I can't assume I have connect permission to any given database to create a scratch table, this is quite a challenge.

I suppose I can only specify options that can be configured based on the permissions that the user is prepared to allow.

This will need a database name with a default of "ite_scratch", the default table name will be "ite_scratch" and there will be a disable flag for people who don't want to grant any privilege.

CVE-2015-9251 (Medium) detected in jquery-1.6.4rc1

CVE-2015-9251 - Medium Severity Vulnerability

Vulnerable Library - jquery1.6.4rc1

jQuery JavaScript Library

Library home page: https://github.com/jquery/jquery.git

Found in HEAD commit: cb1616e699f4ab2cb38b908f85d85549fba56f72

Library Source Files (38)

* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.

  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/event.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/dimensions.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/css.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/core.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/attributes.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/xhr.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/traversing.js
  • /informix-text-exporter/node_modules/jq/support/jquery/speed/jquery-basis.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/queue.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/csp.php
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/dimensions.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/offset.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/traversing.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/readywaitloader.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/support.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/jsonp.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/effects.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/deferred.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/core.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/script.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/deferred.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/support.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/testinit.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/testrunner.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/queue.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/attributes.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/ajax.js
  • /informix-text-exporter/node_modules/jq/support/jquery/speed/benchmarker.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/data.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/offset.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/event.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/effects.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/manipulation.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/manipulation.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/data.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/polluted.php
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/css.js

Vulnerability Details

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Publish Date: 2018-01-18

URL: CVE-2015-9251

CVSS 3 Score Details (6.1)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: Required
    • Scope: Changed
  • Impact Metrics:
    • Confidentiality Impact: Low
    • Integrity Impact: Low
    • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2015-9251

Release Date: 2018-01-18

Fix Resolution: jQuery - v3.0.0


Step up your Open Source Security Game with WhiteSource here

Need Alertmanager alerts

Once we have our metrics in play, we need to create default alerts. #5 is key

Probably want some disk space alarms too, as well as long ready queues, etc. #4

Need more metrics provided by default

At the moment, there aren't really sufficient metrics provided by default. Although this can't provide any application statistics, more generic metrics could be made available - pull requests would be very welcome here!

CVE-2019-11358 (Medium) detected in jquery-1.6.4rc1

CVE-2019-11358 - Medium Severity Vulnerability

Vulnerable Library - jquery1.6.4rc1

jQuery JavaScript Library

Library home page: https://github.com/jquery/jquery.git

Found in HEAD commit: cb1616e699f4ab2cb38b908f85d85549fba56f72

Library Source Files (38)

* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.

  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/event.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/dimensions.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/css.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/core.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/attributes.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/xhr.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/traversing.js
  • /informix-text-exporter/node_modules/jq/support/jquery/speed/jquery-basis.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/queue.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/csp.php
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/dimensions.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/offset.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/traversing.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/readywaitloader.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/support.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/jsonp.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/effects.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/deferred.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/core.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/script.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/deferred.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/support.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/testinit.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/testrunner.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/queue.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/attributes.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/ajax.js
  • /informix-text-exporter/node_modules/jq/support/jquery/speed/benchmarker.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/data.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/offset.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/event.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/effects.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/manipulation.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/manipulation.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/data.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/polluted.php
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/css.js

Vulnerability Details

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Publish Date: 2019-04-20

URL: CVE-2019-11358

CVSS 3 Score Details (6.1)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: Required
    • Scope: Changed
  • Impact Metrics:
    • Confidentiality Impact: Low
    • Integrity Impact: Low
    • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Change files

Origin: jquery/jquery@753d591

Release Date: 2019-03-25

Fix Resolution: Replace or update the following files: core.js, core.js


Step up your Open Source Security Game with WhiteSource here

WS-2016-0090 (Medium) detected in jquery-1.6.4rc1

WS-2016-0090 - Medium Severity Vulnerability

Vulnerable Library - jquery1.6.4rc1

jQuery JavaScript Library

Library home page: https://github.com/jquery/jquery.git

Found in HEAD commit: cb1616e699f4ab2cb38b908f85d85549fba56f72

Library Source Files (38)

* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.

  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/event.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/dimensions.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/css.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/core.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/attributes.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/xhr.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/traversing.js
  • /informix-text-exporter/node_modules/jq/support/jquery/speed/jquery-basis.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/queue.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/csp.php
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/dimensions.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/offset.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/traversing.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/readywaitloader.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/support.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/jsonp.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/effects.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/deferred.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/core.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/script.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/deferred.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/support.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/testinit.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/testrunner.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/queue.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/attributes.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/ajax.js
  • /informix-text-exporter/node_modules/jq/support/jquery/speed/benchmarker.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/data.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/offset.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/event.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/effects.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/manipulation.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/manipulation.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/data.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/polluted.php
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/css.js

Vulnerability Details

JQuery, before 2.2.0, is vulnerable to Cross-site Scripting (XSS) attacks via text/javascript response with arbitrary code execution.

Publish Date: 2016-11-27

URL: WS-2016-0090

CVSS 2 Score Details (4.3)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: jquery/jquery@b078a62

Release Date: 2019-04-08

Fix Resolution: 2.2.0


Step up your Open Source Security Game with WhiteSource here

Need to refactor for frequency

I'm fairly sure that with a large set of metrics or a large schema, the model won't work as queries will go over a minute and cause simultaneous writes

Hence, I need to add in something that will
a) split out frequencies to separate temp files and separate prom files and
b) avoid running multiple instances of a "frequency" concurrently.

So this should probably be two issues. :-)

  • Define lock mechanism
  • Refactor code
  • Test

CVE-2012-6708 (Medium) detected in jquery-1.6.4rc1

CVE-2012-6708 - Medium Severity Vulnerability

Vulnerable Library - jquery1.6.4rc1

jQuery JavaScript Library

Library home page: https://github.com/jquery/jquery.git

Found in HEAD commit: cb1616e699f4ab2cb38b908f85d85549fba56f72

Library Source Files (38)

* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.

  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/event.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/dimensions.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/css.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/core.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/attributes.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/xhr.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/traversing.js
  • /informix-text-exporter/node_modules/jq/support/jquery/speed/jquery-basis.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/queue.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/csp.php
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/dimensions.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/offset.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/traversing.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/readywaitloader.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/support.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/jsonp.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/effects.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/deferred.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/core.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax/script.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/deferred.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/support.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/testinit.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/testrunner.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/queue.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/attributes.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/ajax.js
  • /informix-text-exporter/node_modules/jq/support/jquery/speed/benchmarker.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/data.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/offset/../../../src/offset.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/event.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/effects.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/manipulation.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/../src/manipulation.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/unit/data.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/polluted.php
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/ajax.js
  • /informix-text-exporter/node_modules/jq/support/jquery/test/data/support/../../../src/css.js

Vulnerability Details

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.

Publish Date: 2018-01-18

URL: CVE-2012-6708

CVSS 3 Score Details (6.1)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: Required
    • Scope: Changed
  • Impact Metrics:
    • Confidentiality Impact: Low
    • Integrity Impact: Low
    • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2012-6708

Release Date: 2018-01-18

Fix Resolution: jQuery - v1.9.0


Step up your Open Source Security Game with WhiteSource here

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.