26 matches found
EUVD-2019-0648
Malware in sbrugna...
Malicious code in mvc-seneca (npm)
The package mvc-seneca was found to contain malicious code...
MAL-2025-26926 Malicious code in mvc-seneca (npm)
The package mvc-seneca was found to contain malicious code...
CVE-2019-5483
Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...
CVE-2018-18929
The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password. This can be found by a limited user account in an "unattend.xml" file left over on the C: drive from the Sysprep process. An attacker with this username a...
CVE-2018-18929
The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password. This can be found by a limited user account in an "unattend.xml" file left over on the C: drive from the Sysprep process. An attacker with this username a...
CVE-2018-18929
The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password. This can be found by a limited user account in an "unattend.xml" file left over on the C: drive from the Sysprep process. An attacker with this username a...
CVE-2018-18929
The CVE concerns Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104, where a default local administrator username/password can be found in an unattend.xml left on the C: drive from Sysprep. An attacker with these credentials can gain administrator-level access to the system. Th...
CVE-2018-18929: Use of Hard-coded Credentials
The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password. This can be found by a limited user account in an "unattend.xml" file left over on the C: drive from the Sysprep process. An attacker with this username a...
PT-2019-9670
Name of the Vulnerable Software and Affected Versions Tightrope Media Carousel Seneca HDn version 7.0.4.104 Description The issue concerns a default local administrator username and password that can be discovered by a limited user account. This sensitive information is stored in an "unattend.xml...
@angstone/microservice (>=0.0.0, <=0.0.3), @nodeframe/seneca (>=2.1.0, <=2.2.20) +11 more potentially affected by CVE-2019-5483 via seneca (>=3.1.0, <=3.7.0)
seneca NPM version =3.1.0, =0.0.0, =2.1.0, =0.4.4, =0.1.0, =0.0.0, =0.0.0, =0.0.0, =1.7.9, =1.8.5 - seneca-in-practice 0.2.0 - seneca-kue 0.1.1-alpha.1 - seneca-telldus-live 0.1.0 - tfk-seneca-seeiendom-lookup 1.0.17 Source cves: CVE-2019-5483 Source advisory: GHSA-2XWV-3CC9-FP7C...
@angstone/microservice (>=0.0.0, <=0.0.3), @nodeframe/seneca (>=2.1.0, <=2.2.20) +11 more potentially affected by CVE-2019-5483 via seneca (>=3.1.0, <=3.7.0)
seneca NPM version =3.1.0, =0.0.0, =2.1.0, =0.4.4, =0.1.0, =0.0.0, =0.0.0, =0.0.0, =1.7.9, =1.8.5 - seneca-in-practice 0.2.0 - seneca-kue 0.1.1-alpha.1 - seneca-telldus-live 0.1.0 - tfk-seneca-seeiendom-lookup 1.0.17 Source cves: CVE-2019-5483 Source advisory: OSV:GHSA-2XWV-3CC9-FP7C...
GHSA-2XWV-3CC9-FP7C Sensitive Data Exposure in seneca
Versions of seneca prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output...
Sensitive Data Exposure in seneca
Versions of seneca prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output...
CVE-2019-5483
Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...
CVE-2019-5483
Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...
Design/Logic Flaw
Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...
3pl-central (>=0.1.0, <=0.1.3), @angstone/microservice (>=0.0.0, <=0.0.3) +103 more potentially affected by CVE-2019-5483 via seneca (>=0.4.2, <=3.7.0)
seneca NPM version =0.4.2, =0.1.0, =0.0.0, =2.1.0, =1.0.0, =1.0.0, =1.2.62, =0.4.4, =0.0.1, =0.0.2, =1.7.5, =0.1.0, =0.7.11-pre, =0.1.0, =0.1.0, =0.1.4 and more Source cves: CVE-2019-5483 Source advisory: MEND:CVE-2019-5483...
