1779 matches found
Malicious Package
Overview yandex-logger-qloud is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...
Malicious Package
Overview yandex-logger-std is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
Malicious Package
Overview yandex-logger-sentry is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious Package
Overview saddlebag-event-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious Package
Overview @skinternal/sk-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious Package
Overview harel-logger-ts is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...
SUSE CVE-2009-3880
The Abstract Window Toolkit AWT in Java Runtime Environment JRE in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the...
SUSE CVE-2017-14727
logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...
SUSE CVE-2021-40540
ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...
SUSE CVE-2022-26520
In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...
Malicious code in simple-qloud-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ea09cd18d7a4ebab28f95cbef194e9b6e91e9ce5e4e30943af638e29ba6708 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yandex-logger-qloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a97249a6dcc4c34ed76e9865aa3f3a919e152716c220e2fa7a1650dba9b22226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yandex-logger-std (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c058819d25d1e98333c17166cbad13c51000407b8955ed454fc161515450ce71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-987 Malicious code in yandex-logger-std (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c058819d25d1e98333c17166cbad13c51000407b8955ed454fc161515450ce71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yandex-logger-sentry (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c81d36303d3e14463172a01a3d04fd2b8b0456c22bc8fcbc4df9fc4c27ac65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-986 Malicious code in yandex-logger-sentry (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c81d36303d3e14463172a01a3d04fd2b8b0456c22bc8fcbc4df9fc4c27ac65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-985 Malicious code in yandex-logger-qloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a97249a6dcc4c34ed76e9865aa3f3a919e152716c220e2fa7a1650dba9b22226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-36567
A flaw was found in gin. This issue occurs when the default Formatter for the Logger middleware LoggerConfig.Formatter, which is included in the Default engine, allows attackers to inject arbitrary log entries by manipulating the request path...
GHSA-6VM3-JJ99-7229 Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
Gin is a HTTP web framework written in Go Golang. Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
