Malicious code in mock-solc-0.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252116288f46e50fdc890ac7683a16796ff2fdd325109640c5d532e01cc615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4659 Malicious code in mock-solc-0.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252116288f46e50fdc890ac7683a16796ff2fdd325109640c5d532e01cc615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cn.acooly:acooly-auth-google-authenticator (=5.2.1), cn.acooly:acooly-auth-parent (=5.2.1) +238 more potentially affected by CVE-2019-1010206 via com.github.kevinsawicki:http-request (>=0.6 <=6.0)

com.github.kevinsawicki:http-request MAVEN version =0.6, =6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.kevinsawicki:http-request and may be impacted: - cn.acooly:acooly-auth-google-authenticator =5.2.1 - cn.acooly:acooly-auth-parent...

ai.grakn:grakn-dist (>=0.7.0 <=0.16.0), ai.grakn:grakn-test (=0.10.0) +1836 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (>=0.6.0 <=6.8.11)

org.elasticsearch:elasticsearch MAVEN version =0.6.0, =0.7.0, =0.6.1, =0.11.0, =0.3.0, =1.0.1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.2.1 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-starter =5.2.0 and more Source cves: CVE-2020-7019 Source advisory: OSV:GHSA-C77J-P484-H84M...

at.molindo:esi4j (>=0.3.0 <=2.0.1), at.molindo:scrutineer (=2.0.0) +430 more potentially affected by CVE-2015-3337 via org.elasticsearch:elasticsearch (>=0.6.0 <=1.4.4)

org.elasticsearch:elasticsearch MAVEN version =0.6.0, =0.3.0, =1.0.1, =1.0.0, =0.1PRE2, =0.1PRE1, =0.1PRE1, =0.1PRE1, =0.1PRE4, =0.1PRE4, =0.1PRE4, =0.1PRE4, =0.1PRE4, =0.1PRE4, =0.1PRE4, =0.1PRE6 and more Source cves: CVE-2015-3337 Source...

PT-2022-18852 · Jenkins · Jenkins Sitemonitor Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SiteMonitor Plugin version 0.6 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because URLs of sites to monitor in tooltips are not properly escaped, allowing attackers with...

Jenkins SiteMonitor Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

CVE-2022-25643

seatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when installed setuid root. The attack vector is a user-supplied socket pathname...

CVE-2016-20013

sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service CPU consumption because the algorithm's runtime is proportional to the square of the length of the password...

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service which becomes unresponsive after this flaw is triggered.

...

CVE-2020-20665

rudp v0.6 was discovered to contain a memory leak in the component main.c...

PT-2021-10526 · Rudp · Rudp

Name of the Vulnerable Software and Affected Versions: rudp version 0.6 Description: A memory leak was discovered in the component main.c of rudp. Recommendations: For version 0.6, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

opensysusers 代码注入漏洞

opensysusers is an open source package. It is an alternative implementation of systemd-sysusers that can be run on systems with or without systemd installed. A code injection vulnerability exists in versions of opensysusers prior to 0.6, which poses a security risk primarily due to the use of...

nginx 0.6.x < 1.20.1 1-Byte Memory Overwrite RCE

The installed version of nginx is 0.6.18 prior to 1.20.1. It is, therefore, affected by a remote code execution vulnerability. A security issue in nginx resolver was identified, which might allow an unauthenticated remote attacker to cause 1-byte memory overwrite by using a specially crafted DNS...

Design/Logic Flaw

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...

UBUNTU-CVE-2021-3468

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...