EulerOS 2.0 SP11 : emacs (EulerOS-SA-2023-2639)

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or...

EulerOS Virtualization 2.11.1 : emacs (EulerOS-SA-2023-2721)

According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to arbitrary code execution due to Babel.

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to arbitrary code execution due to Babel CVE-2023-45133. Vulnerability Details CVEID:CVE-2023-45133 DESCRIPTION: Babel could allow a local attacker to execute arbitrary code on the system, caused by a...

Security Bulletin: IBM Storage Fusion HCI may be vulnerable to Injection, Regular Expression Denial of Service (ReDoS), and Arbitrary Code Execution and via use of postcss, semver, babel-traverse (CVE-2023-45133, CVE-2022-25883, CVE-2023-44270)

Summary JavaScript libraries postcss, semver, and babel-traverse are used by IBM Storage Fusion HCI's Web Interface. Vulnerabilities in these libraries could lead to Denial of Service and Arbitrary Code Injection as described the the CVEs listed in the "Vulnerability Details" section. Vulnerabili...

MAL-2023-8689 Malicious code in npm_package_babel_plugins_3_1_pragma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3632cb4fe4754d272e86ef810873600bf47c3e8c42733de77bf10571a80fc675 The OpenSSF Package Analysis project identified 'npmpackagebabelplugins31pragma' @ 99.99.99 npm as malicious. It is considered malicious because...

Security Bulletin: Babel-traverse is vulnerable to CVE-2023-45133 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses babel-traverse which is vulnerable to CVE-2023-45133. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-45133 DESCRIPTION: Babel could allow a local attacker to execute...

MAL-2023-8649 Malicious code in npm_package_dependencies__babel_runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...

Malicious code in npm_package_dependencies__babel_runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...

SUSE CVE-2022-37331

An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Babel

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Babel. Vulnerability Details CVEID: CVE-2023-45133 DESCRIPTION: Babel could allow a local attacker to execute arbitrary code on the system, caused by a flaw in the path.evaluateor path.evaluateTruth...

The vulnerability of the TranslationVectors Parser component of the Open Babel file-format conversion software allows a hacker to execute arbitrary code.

The vulnerability of the TranslationVectors Parser software’s file format conversion module for chemical substances in Open Babel is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

python27:2.7 security and bug fix update

babel 2.5.1-10 - Fix CVE-2021-20095 Resolves: rhbz1955615 2.5.1-9 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 2.5.1-8 - Fix unversioned requires/buildrequires - Resolves: rhbz1628242 2.5.1-7 - Remove unversioned binaries - Resolves: rhbz1613343 2.5.1-6 - Make...

Security Bulletin: IBM Storage Fusion may be vulnerable to Injection, Regular Expression Denial of Service (ReDoS), and Arbitrary Code Execution and via use of postcss, semver, babel-traverse (CVE-2023-45133, CVE-2022-25883, CVE-2023-44270)

Summary JavaScript libraries postcss, semver, and babel-traverse are used by IBM Storage Fusion's Web Interface. Vulnerabilities in these libraries could lead to Denial of Service and Arbitrary Code Injection as described the the CVEs listed in the "Vulnerability Details" section. Vulnerability...

Rocky Linux 8 : python27:2.7 (RLSA-2021:4151)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4151 advisory. - In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP. CVE-2020-27619 - This affect...

Rocky Linux 8 : babel (RLSA-2021:4201)

The remote Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2021:4201 advisory. - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading t...

The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel allows a hacker to execute arbitrary code.

The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel allows a hacker to execute arbitrary code.

The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel allows a hacker to execute arbitrary code.

The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the nAtoms function in the Open Babel file conversion software allows a hacker to execute arbitrary code.

The vulnerability of the nAtoms function in the Open Babel file conversion software is related to the writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel allows a hacker to execute arbitrary code.

The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...