2528 matches found
SketchSVG Arbitrary Code Injection vulnerability
All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string...
CVE-2023-26107
All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string...
Design/Logic Flaw
All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...
CVE-2023-26108
CVE-2023-26108 affects the NestJS framework component @nestjs/core when running versions prior to 9.0.5 . The vulnerability enables information exposure via the StreamableFile pipe if a client cancels a request while streaming; the underlying stream remains open, potentially leaking data. Connect...
The vulnerability of the npm systeminformation package on the Node.js software platform allows a hacker to execute arbitrary commands.
The vulnerability of the npm systeminformation package on Node.js platforms exists due to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
abd-clam (>=0.22.2, <=0.30.0), abrute (>=0.1.2, <=0.1.9) +2473 more potentially affected by unknown CVE via remove_dir_all (>=0.3.0, <=0.7.0)
removedirall CARGO version =0.3.0, =0.22.2, =0.1.2, =0.1.1, =0.1.0, =0.2.0, =2.1.0, =0.1.0-rc1, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MC8H-8Q98-G5HR...
CVE-2023-22458 affecting package redis for versions less than 6.2.9-1
CVE-2023-22458 affecting package redis for versions less than 6.2.9-1. An upgraded version of the package is available that resolves this issue...
SUSE SLES15 / openSUSE 15 Security Update : rubygem-activerecord-5_1 (SUSE-SU-2023:0492-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0492-1 advisory. - CVE-2022-44566: Fixed possible denial of service vulnerability in ActiveRecord's PostgreSQL adapter bsc1207450. Tenable has extracted th...
CVE-2023-26314
The CVE-2023-26314 entry affects the mono package for Debian prior to 6.8.0.105+dfsg-3.3, where the MIME type application/x-ms-dos-executable is linked to an un-sandboxed Mono CLR interpreter, enabling arbitrary code execution. Debian’s advisory (DLA-3343-1) fixes this in mono 5.18.0.240+dfsg-3+d...
CVE-2023-24107
hourofcodepython2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package requirements.txt. This vulnerability allows attackers to access sensitive user information and execute arbitrary code...
K73455417: obs-service-extract_file package vulnerability CVE-2016-4007
Security Advisory Description Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal...
Debian dla-3320 : gir1.2-javascriptcoregtk-4.0 - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3320 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3320-1 [email protected] https://www.debian.org/lts/security/...
SUSE CVE-2021-23567
The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...
SUSE CVE-2022-40898
An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...
CVE-2008-2149 affecting package wordnet for versions less than 3.0-38
CVE-2008-2149 affecting package wordnet for versions less than 3.0-38. A patched version of the package is available...
CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35
CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...
CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1
CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1. A patched version of the package is available...
Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2023-1315)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
