-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02-infrastructure (1.0.0) +21728 more potentially affected by CVE-2020-7789 via node-notifier (>=1.0.0-beta, <=8.0.0)

node-notifier NPM version =1.0.0-beta, =1.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.3 and more Source cves: CVE-2020-7789 Source advisory: MEND:CVE-2020-7789...

CVE-2020-7789

This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array...

Mikaelbr Node-notifier Operating System Command Injection Vulnerability

Mikaelbr Node-notifier is a Javascript-based codebase for sending rulers for Mac, Windows, and Linux by the individual developer Mikaelbr. A security vulnerability exists in node-notifier versions prior to 9.0.0, which allows an attacker to exploit the vulnerability to run arbitrary commands on a...

CVE-2020-7789: Improper Neutralization of Special Elements used in an OS Command

This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array...

PT-2020-6158

Name of the Vulnerable Software and Affected Versions node-notifier versions prior to 9.0.0 Description The issue allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitized when being passed an array. This could enable an attacker to execute...

Zoom Takes on Zoom-Bombers Following FTC Settlement

Zoom has once again upped its security controls to prevent “Zoom-bombing” and other cyberattacks on meetings. The news comes less than a week after Zoom settled with the Federal Trade Commission over false encryption claims. Two of the new features allow moderators to act as “club bouncers,” givi...

@abdullah2993/web-ext-webpack-plugin (1.0.0), @airy/maleo (>=0.0.1-canary.49, <=0.3.1-canary.36) +148 more potentially affected by CVE-2020-7789 via node-notifier (>=5.0.2, <=5.4.3)

node-notifier NPM version =5.0.2, =0.0.1-canary.49, =1.0.0, =0.1.0, =0.1.0, =0.1.1-alpha.0, =0.10.30, =2.0.0-beta.1, =1.7.0, =2.29.0, =2.94.0 and more Source cves: CVE-2020-7789 Source advisory: SNYK:JS-NODENOTIFIER-1035794...

@abdullah2993/web-ext-webpack-plugin (>=1.1.0, <=1.1.1), @bgpat/webext-webpack-plugin (0.1.4) +20 more potentially affected by CVE-2020-7789 via node-notifier (>=8.0.0, <=8.0.1)

node-notifier NPM version =8.0.0, =1.1.0, =2.3.0, =15.0.0, =0.1.19-a2, =0.5.17-a10, =2.4.0, =0.0.38, =4.2.0, =0.0.2, =0.0.18 and more Source cves: CVE-2020-7789 Source advisory: SNYK:JS-NODENOTIFIER-1035794...

@bgpat/webext-webpack-plugin (>=0.1.7, <=0.1.8), @inkofpixel/shopify-builder (>=0.0.3, <=0.0.16) +22 more potentially affected by CVE-2020-7789 via node-notifier (9.0.0)

node-notifier NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-notifier and may be impacted: - @bgpat/webext-webpack-plugin =0.1.7, =0.0.3, =17.1.8, =0.3.1, =6.7.0, =1.4.0, =0.6.2, =0.5.19-a3, =2.3.2, =1.0.0, =1.0.0, =0.3.1, =1.4....

Command Injection

Overview node-notifier is an A Node.js module for sending notifications on native Mac, Windows post and pre 8 and Linux or Growl as fallback Affected versions of this package are vulnerable to Command Injection. It allows an attacker to run arbitrary commands on Linux machines due to the options...

grunt-qunit-notifier (0.1.0), helper-clockmaker (1.0.3) +2 more potentially affected by CVE-2013-7381 via libnotify (>=1.0.1, <=1.0.2)

libnotify NPM version =1.0.1, =0.1.0, =0.0.1, =0.1.5 Source cves: CVE-2013-7381 Source advisory: OSV:GHSA-6898-WX94-8JQ8...

grunt-qunit-notifier (0.1.0), helper-clockmaker (1.0.3) +2 more potentially affected by CVE-2013-7381 via libnotify (>=1.0.1, <=1.0.2)

libnotify NPM version =1.0.1, =0.1.0, =0.0.1, =0.1.5 Source cves: CVE-2013-7381 Source advisory: GHSA-6898-WX94-8JQ8...

CVE-2020-0249

In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2020-7581

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC Notifier...

CVE-2020-7587

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD V8.0, SIMATIC IT LMS All...

CVE-2020-7581

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD V8.0, SIMATIC Notifier...

CVE-2020-7581

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC Notifier...

CVE-2020-7581

CVE-2020-7581 affects Siemens/Opcenter components (Discrete/Foundation/Process, Intelligence, Quality, RD&L) and related SIMATIC/Soft Starter/PCS neo, STEP 7, SIMOCODE ES, and Notifier Server. Root cause: an internal component calls a helper binary with SYSTEM privileges during startup via an unq...

CVE-2020-7581: Unquoted Search Path or Element

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC Notifier...

PT-2020-6696 · Siemens · Simocode Es +12

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Discrete versions prior to V3.2 Opcenter Execution Foundation versions prior to V3.2 Opcenter Execution Process versions prior to V3.2 Opcenter Intelligence versions prior to V3.3 Opcenter Quality versions prior to V11.3...