NewStart CGSL CORE 5.04 / MAIN 5.04 : yum-utils Vulnerability (NS-SA-2019-0024)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has yum-utils packages installed that are affected by a vulnerability: - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. I...

NewStart CGSL MAIN 4.05 : yum-utils Vulnerability (NS-SA-2019-0133)

The remote NewStart CGSL host, running version MAIN 4.05, has yum-utils packages installed that are affected by a vulnerability: - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacke...

The vulnerability of the PDF to HTML conversion tool, pdftohtml, related to the manipulation of the zero pointer, allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the PDF document conversion tool pdftohtml, which is part of the poppler-utils package, relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure in the application or execute arbitrary code by entering a...

Cross-site Scripting (XSS)

nifi-web-utils is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the request attribute value...

OracleVM 3.3 / 3.4 : bind (OVMSA-2019-0027)

The remote OracleVM system is missing necessary patches to address critical security updates : - Use only selected documentation files - Fix CVE-2018-5743 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2019-0027...

rhn-tools:1.0 bug fix update

An update is available for osad, spacewalk-abrt, rhn-custom-info, rhncfg, spacewalk-oscap, spacewalk-backend, rhn-virtualization, spacewalk-usix, rhnpush, spacewalk-client-cert, cobbler. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

Remote Code Execution in node-os-utils

Versions of node-os-utils prior to 1.1.0 are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution. Recommendation Upgrade to version 1.1.0 or later...

@condor-labs/metrics (>=1.3.0, <=1.3.5), zation (>=0.6.5, <=0.7.0) +3 more potentially affected by unknown CVE via node-os-utils (1.0.7)

node-os-utils NPM version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-os-utils and may be impacted: - @condor-labs/metrics =1.3.0, =0.6.5, =0.7.4, =0.2.2, =0.2.3 - zation-service-nodemailer 0.1.2 Source cves: unknown CVE Source advisory:...

GHSA-J9F8-8H89-J69X Remote Code Execution in node-os-utils

Versions of node-os-utils prior to 1.1.0 are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution. Recommendation Upgrade to version 1.1.0 or later...

PT-2019-20053

Name of the Vulnerable Software and Affected Versions node-os-utils versions prior to 1.1.0 Description The issue is related to insufficient input validation, which allows an attacker to run arbitrary commands on the server. This can lead to remote code execution. Recommendations Upgrade to versi...

PT-2019-20040

Name of the Vulnerable Software and Affected Versions opencv versions prior to 6.1.0 Description The issue concerns Command Injection due to the lack of validation of user input in the utils/ script find-opencv.js, allowing attackers to execute arbitrary commands. Recommendations For versions pri...

PT-2019-19359

Name of the Vulnerable Software and Affected Versions WebApp version 04.68 Description The issue allows remote attackers to make several types of API calls without authentication. This can be demonstrated by retrieving password hashes via an API call to "inc/utils/REST...

PT-2019-6871 · Chicken +1 · Chicken +1

Name of the Vulnerable Software and Affected Versions: Chicken versions prior to 4.9.0 Description: The issue is related to an OS command injection vulnerability in the qs procedure from the utils module. Recommendations: For versions prior to 4.9.0, update to version 4.9.0 or later to resolve th...

EulerOS Virtualization 3.0.1.0 : scsi-target-utils (EulerOS-SA-2019-1427)

According to the versions of the scsi-target-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflows in the iSNS implementation in isns.c in 1 Linux SCSI target framework aka tgt or...

EulerOS Virtualization for ARM 64 3.0.1.0 : yum-utils (EulerOS-SA-2019-1415)

According to the version of the yum-utils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remo...

ALBA-2019:0986 rhn-tools:1.0 bug fix update

AlmaLinux Network Tools provide programs and libraries that allow your system to use provisioning, monitoring, and configuration management capabilities provided by AlmaLinux Network and AlmaLinux Network Satellite. The spacewalk-remote-utils package contains the spacewalk-create-channel utility...

rhn-tools:1.0 bug fix update

An update is available for osad, spacewalk-abrt, rhn-custom-info, rhncfg, spacewalk-koan, spacewalk-oscap, spacewalk-backend, rhn-virtualization, spacewalk-usix, rhnpush, spacewalk-client-cert, cobbler, spacewalk-remote-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring Syst...

Fedora Update for coreutils FEDORA-2018-3a25355ab6

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Command Injection

Overview All versions of cocos-utils are vulnerable to Remote Code Execution. The unzip function concatenates user input to exec which may allow attackers to execute arbitrary commands on the server. Recommendation No fix is currently available. Consider using an alternative module until a fix is...

PT-2019-12198

Name of the Vulnerable Software and Affected Versions GPAC version 0.7.1 Description The issue is related to a buffer overflow in the gf bin128 parse function, located in utils/os divers.c, which occurs when the crypt feature encounters a crafted drm file.xml file. Recommendations For GPAC versio...