PT-2018-19177

Name of the Vulnerable Software and Affected Versions xml package affected versions not specified Description The issue concerns the xml package's use of environment variables to override parser/DOM implementations, specifically in the xml.sax package and the xml.dom.domreg module. When the...

PSF-2018-7 xml package does not obey ignore_environment

On two occasions, the xml package uses environment variables to override parser / DOM implementations: xml.sax package and xml.dom.domreg module. On both occasions, the code should not use env vars to override module names, when the interpreter is started with flags like -E or -I...

GHSA-5CV7-R488-WC5X noderequest is malware

The noderequest package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

noderequest is malware

The noderequest package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

Unspecified Vulnerability in NoMachine App for Android

NoMachine App for Android is a remote desktop application for the Android platform from NoMachine Luxembourg. A security vulnerability exists in NoMachine App for Android. An attacker can exploit the vulnerability to modify environment variables...

CVE-2018-0664

A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors...

CVE-2018-0664

A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors...

Design/Logic Flaw

A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors...

CVE-2018-0664

NoMachine App for Android contains an information alteration vulnerability that allows a remote attacker to modify environment variables, potentially leading to arbitrary code execution. Affected versions are NoMachine App for Android 5.0.63 and earlier; JVN notes the issue affects Android up to ...

CVE-2018-0664

A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors...

CVE-2018-0664: Improper Input Validation

A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors...

PT-2018-9002

Name of the Vulnerable Software and Affected Versions NoMachine App for Android versions 5.0.63 and earlier Description A vulnerability in the software allows attackers to alter environment variables via unspecified vectors. Recommendations For versions 5.0.63 and earlier, update to a version lat...

babelcli is malware

The babelcli package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

GHSA-72HV-RP4Q-Q7F3 babelcli is malware

The babelcli package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

GHSA-3WXQ-7R8M-QPMG ffmepg is malware

The ffmepg package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern ...

ffmepg is malware

The ffmepg package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern ...

GHSA-4X37-5RH2-HP8C node-opencv is malware

The node-opencv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

node-opencv is malware

The node-opencv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

GHSA-5HXW-R847-QFWP opencv.js is malware

opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

openssl.js is malware

The openssl.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...