1270 matches found
MAL-2023-8689 Malicious code in npm_package_babel_plugins_3_1_pragma (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3632cb4fe4754d272e86ef810873600bf47c3e8c42733de77bf10571a80fc675 The OpenSSF Package Analysis project identified 'npmpackagebabelplugins31pragma' @ 99.99.99 npm as malicious. It is considered malicious because...
Security Bulletin: Babel-traverse is vulnerable to CVE-2023-45133 used in IBM Maximo Application Suite - Monitor Component
Summary IBM Maximo Application Suite - Monitor Component uses babel-traverse which is vulnerable to CVE-2023-45133. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-45133 DESCRIPTION: Babel could allow a local attacker to execute...
MAL-2023-8649 Malicious code in npm_package_dependencies__babel_runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...
Malicious code in npm_package_dependencies__babel_runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...
SUSE CVE-2022-37331
An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Babel
Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Babel. Vulnerability Details CVEID: CVE-2023-45133 DESCRIPTION: Babel could allow a local attacker to execute arbitrary code on the system, caused by a flaw in the path.evaluateor path.evaluateTruth...
The vulnerability of the TranslationVectors Parser component of the Open Babel file-format conversion software allows a hacker to execute arbitrary code.
The vulnerability of the TranslationVectors Parser software’s file format conversion module for chemical substances in Open Babel is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
python27:2.7 security and bug fix update
babel 2.5.1-10 - Fix CVE-2021-20095 Resolves: rhbz1955615 2.5.1-9 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 2.5.1-8 - Fix unversioned requires/buildrequires - Resolves: rhbz1628242 2.5.1-7 - Remove unversioned binaries - Resolves: rhbz1613343 2.5.1-6 - Make...
Security Bulletin: IBM Storage Fusion may be vulnerable to Injection, Regular Expression Denial of Service (ReDoS), and Arbitrary Code Execution and via use of postcss, semver, babel-traverse (CVE-2023-45133, CVE-2022-25883, CVE-2023-44270)
Summary JavaScript libraries postcss, semver, and babel-traverse are used by IBM Storage Fusion's Web Interface. Vulnerabilities in these libraries could lead to Denial of Service and Arbitrary Code Injection as described the the CVEs listed in the "Vulnerability Details" section. Vulnerability...
Rocky Linux 8 : python27:2.7 (RLSA-2021:4151)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4151 advisory. - In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP. CVE-2020-27619 - This affect...
Rocky Linux 8 : babel (RLSA-2021:4201)
The remote Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2021:4201 advisory. - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading t...
The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel allows a hacker to execute arbitrary code.
The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel allows a hacker to execute arbitrary code.
The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel allows a hacker to execute arbitrary code.
The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of the nAtoms function in the Open Babel file conversion software allows a hacker to execute arbitrary code.
The vulnerability of the nAtoms function in the Open Babel file conversion software is related to the writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel allows a hacker to execute arbitrary code.
The vulnerability of the TranslationVectors function in the software for converting chemical substance formats in Open Babel is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
SUSE CVE-2023-45133
Babel is a compiler for writingJavaScript. In @babel/traverse prior to versions 7.23.2 and 8.0.0-alpha.4 and all versions of babel-traverse, using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that re...
Debian: Security Advisory (DLA-3618-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3618 : node-babel-cli - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3618 advisory. - - - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3618-1 [email protected]...
CVE-2023-45133
A vulnerability was discovered in the babel package. Using certain plugins with Babel code could lead to arbitrary code execution. This issue could allow a remote attacker to craft code and then trick the user into compiling it. Mitigation Mitigation for this issue is either not available or the...