UBUNTU-CVE-2022-50302

In the Linux kernel, the following vulnerability has been resolved: lockd: set other missing fields when unlocking files vfslockfile expects the struct filelock to be fully initialised by the caller. Re-exported NFSv3 has been seen to Oops if the flfile field is NULL...

PT-2025-37604

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel where vfs lock file may encounter an issue if the fl file field within the struct file lock is NULL. This can occur during NFSv3 operations when...

Malicious code in packages-lock.json (npm)

The package packages-lock.json was found to contain malicious code...

MAL-2025-28646 Malicious code in packages-lock.json (npm)

The package packages-lock.json was found to contain malicious code...

MAL-2025-40351 Malicious code in yarn.lock (npm)

The package yarn.lock was found to contain malicious code...

CVE-2023-34098

Shopware is an open source e-commerce software. Due to an incorrect configuration in the .htaccess file, the configuration file of the Javascript could be read in production environments themes/package-lock.json. With this information, the specific Shopware version in a deployment might be...

CVE-2020-21554

A File Deletion vulnerability exists in TinyShop 3.1.1 in the backlist parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms...

Insecure Temporary File

Overview greenbids-tailor is a Bring traffic shaping to your own cloud Affected versions of this package are vulnerable to Insecure Temporary File due to the use of a world-writable directory /tmp for the download lock file greenbids-tailor-download.lock. This setup could allow local attackers wi...

CVE-2024-45391

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

CVE-2024-45391

The CVE-2024-45391 vulnerability affects Tina CMS when using Tina CLI before version 1.6.2. A search token may be leaked via the tina-lock.json lock file. The issue is mitigated by upgrading to @tinacms/cli 1.6.2 and rotating the search token. If upgrading is not feasible, token rotation remains ...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

Tina search token leak via lock file in TinaCMS

Impact Tina search token leaked via lock file tina-lock.json in TinaCMS. Sites building with @tinacms/cli 1.6.2 that use a search token are impacted. If your Tina-enabled website has search setup, you should rotate that key immediately. Patches This issue has been patched in @tinacms/[email protected]...

GHSA-4QRM-9H4R-V2FX Tina search token leak via lock file in TinaCMS

Impact Tina search token leaked via lock file tina-lock.json in TinaCMS. Sites building with @tinacms/cli 1.6.2 that use a search token are impacted. If your Tina-enabled website has search setup, you should rotate that key immediately. Patches This issue has been patched in @tinacms/[email protected]...

Token Leakage

Tina CMS is vulnerable to search Token leakage. The vulnerability is due to the search token being leaked through the lock file tina-lock.json, allows an attacker to gain unauthorized access to the search functionality by exploiting the leaked search token...

PT-2024-31595 · Unknown · @Tinacms/Cli

Name of the Vulnerable Software and Affected Versions: @tinacms/cli versions prior to 1.6.2 Description: Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI that use a search token may be vulnerable to the search token being leaked via...

TinaCMS 安全漏洞

TinaCMS is an open source headless CMS for Markdown, MDX and JSON. A security vulnerability exists in TinaCMS versions prior to 1.6.2, which stems from a search token that may be leaked via a lock file...

CVE-2024-41012

CVE-2024-41012 (Linux kernel) describes a filelock race where fcntl_setlk() races with close() and a second path in posix_lock_file() could fail to remove a lock. In certain LSMs this could let a created lock survive a competing removal, enabling use-after-free reads in /proc/locks and potentiall...

RHEL 4 : xorg-x11 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - x11perfcomp has dot in its path CVE-2011-2504 - The LockServer function in os/utils.c in X.Org xserver...