1096 matches found
[SECURITY] Fedora 36 Update: godotenv-1.4.0-5.fc36
A Go port of Ruby's dotenv library Loads environment variables from .env...
CVE-2022-22215
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...
[SECURITY] Fedora 35 Update: godotenv-1.4.0-4.fc35
A Go port of Ruby's dotenv library Loads environment variables from .env...
Juniper Networks Junos OS 资源管理错误漏洞
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS, which can be exploited to trigger a denial ...
MAL-2022-2540 Malicious code in dn-dev-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dn-dev-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ajax-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8067a242f83704cddf8ecff50a82cdb22ed341edee9645a934387150b469c45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-917 Malicious code in ajax-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8067a242f83704cddf8ecff50a82cdb22ed341edee9645a934387150b469c45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @maui-mf/common-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0266e00c61c83cf412bd4b53bc814121b7ec42d2e712ca9c6a92f3a403346542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
UBUNTU-CVE-2021-41683
There is a stack-overflow at ecma-helpers.c:326 in ecmagetlexenvtype in JerryScript 2.4.0...
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds read vulnerability exists in Google Android, which originates in exynossecEnvinit in mach-gs101.c. An out-of-bounds read may occur due to a boundary checking error. An attacker could exploit this...
new packages: perl-Env
An update is available for perl-Env. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...
PT-2022-18281 · Jenkins · Jenkins Parameterized Trigger Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Parameterized Trigger Plugin versions 2.43 and earlier Description: The issue concerns the capture and storage of environment variables, including password parameter values, in build.xml files by the Jenkins Parameterized Trigger...
CVE-2022-0563
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...
PT-2022-1723 · Vim +5 · Vim +5
Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is caused by a heap-based buffer overflow in the compile get env function of the vim text editor. This can allow an attacker to execute arbitrary code. The estimated number of...
fnoc (>=0.3.0, <=0.3.2), jsoncfg (>=0.0.1, <=0.1.2) +2 more potentially affected by CVE-2020-28269 via field (0.0.1)
field NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on field and may be impacted: - fnoc =0.3.0, =0.0.1, =0.4.1, =0.4.0, =0.5.0 Source cves: CVE-2020-28269 Source advisory: OSV:GHSA-HM82-QR45-H7MW...
CVE-2021-43780
Redash is a package for data visualization and sharing. In versions 10.0 and priorm the implementation of URL-loading data sources like JSON, CSV, or Excel is vulnerable to advanced methods of Server Side Request Forgery SSRF. These vulnerabilities are only exploitable on installations where a...
env-team.com Cross Site Scripting vulnerability OBB-2134619
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security update for golang-github-prometheus-prometheus (moderate)
openSUSE Security Update: Security update for golang-github-prometheus-prometheus Announcement ID: openSUSE-SU-2021:2664-1 Rating: moderate References: 1186242 SLE-18254 Cross-References: CVE-2021-29622 CVSS scores: CVE-2021-29622 NVD : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected...
CVE-2021-22925
curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...