SUSE CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

SUSE CVE-2022-4065

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to...

SUSE CVE-2022-29599

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

SUSE CVE-2022-29869

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...

maven-shared-utils: Command injection via Commandline class

A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...

CVE-2023-0634

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2023-0634

Removed by vendor...

Malicious code in dvf-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf18547f9f147479c4459ff3e5a5ea3c30c2f74abd59960980007211ed420ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-294 Malicious code in dvf-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf18547f9f147479c4459ff3e5a5ea3c30c2f74abd59960980007211ed420ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0634

An uncontrolled process operation was found in the newgrp command provided by the shadow-utils package. This issue could cause the execution of arbitrary code provided by a user when running the newgrp command...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2023-1247)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.1 security update

Red Hat OpenShift Container Platform release 4.12.1 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

Malicious code in proxy-stub-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eab7b2cd38fda0244b8fd8d667252f0874393d890662d57aad3c71364a8d9bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-704 Malicious code in proxy-stub-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eab7b2cd38fda0244b8fd8d667252f0874393d890662d57aad3c71364a8d9bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trust-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc0592f3a898992e95d6073b40459a085c6fbb0e9691a63bc549f1689636ecdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-906 Malicious code in trust-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc0592f3a898992e95d6073b40459a085c6fbb0e9691a63bc549f1689636ecdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS Virtualization 3.0.2.2 : cifs-utils (EulerOS-SA-2023-1247)

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container c...

Malicious Package

Overview @nelio-content/utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview bsd-ui-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview trust-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...