CVE-2020-28437 Command Injection

This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js...

CVE-2020-28437

CVE-2020-28437 affects all versions of the npm package heroku-env. The vulnerability is a command-injection flaw in the get() function, with the injection point in lib/get.js which is required by index.js. This allows unsanitized user input to lead to shell execution. Public sources (Veracode, GH...

npm heroku-env 命令注入漏洞

npm heroku-env is a package from npm USA. It is used to parse DATABASEURL from heroku configuration and split it into PG environment variables used by psql pgdump pgrestore and nodepostgres. A command injection vulnerability exists in versions of heroku-env prior to 2.0.2, which stems from the...

npm heroku-env 命令注入漏洞

npm heroku-env is a package from npm USA. It is used to parse DATABASEURL from heroku configurations and split it into PG environment variables used by psql pgdump pgrestore and nodepostgres. A command injection vulnerability exists in all versions of heroku-env, which stems from the presence of...

[SECURITY] Fedora 36 Update: godotenv-1.4.0-5.fc36

A Go port of Ruby's dotenv library Loads environment variables from .env...

CVE-2022-22215

A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...

[SECURITY] Fedora 35 Update: godotenv-1.4.0-4.fc35

A Go port of Ruby's dotenv library Loads environment variables from .env...

Juniper Networks Junos OS 资源管理错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS, which can be exploited to trigger a denial ...

MAL-2022-2540 Malicious code in dn-dev-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dn-dev-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ajax-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8067a242f83704cddf8ecff50a82cdb22ed341edee9645a934387150b469c45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-917 Malicious code in ajax-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8067a242f83704cddf8ecff50a82cdb22ed341edee9645a934387150b469c45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @maui-mf/common-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0266e00c61c83cf412bd4b53bc814121b7ec42d2e712ca9c6a92f3a403346542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2021-41683

There is a stack-overflow at ecma-helpers.c:326 in ecmagetlexenvtype in JerryScript 2.4.0...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds read vulnerability exists in Google Android, which originates in exynossecEnvinit in mach-gs101.c. An out-of-bounds read may occur due to a boundary checking error. An attacker could exploit this...

new packages: perl-Env

An update is available for perl-Env. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

PT-2022-18281 · Jenkins · Jenkins Parameterized Trigger Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Parameterized Trigger Plugin versions 2.43 and earlier Description: The issue concerns the capture and storage of environment variables, including password parameter values, in build.xml files by the Jenkins Parameterized Trigger...

CVE-2022-0563

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...

PT-2022-1723 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is caused by a heap-based buffer overflow in the compile get env function of the vim text editor. This can allow an attacker to execute arbitrary code. The estimated number of...

fnoc (>=0.3.0, <=0.3.2), jsoncfg (>=0.0.1, <=0.1.2) +2 more potentially affected by CVE-2020-28269 via field (0.0.1)

field NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on field and may be impacted: - fnoc =0.3.0, =0.0.1, =0.4.1, =0.4.0, =0.5.0 Source cves: CVE-2020-28269 Source advisory: OSV:GHSA-HM82-QR45-H7MW...