8358 matches found
CVE-2025-27144 affecting package dcos-cli for versions less than 1.2.0-17
CVE-2025-27144 affecting package dcos-cli for versions less than 1.2.0-17. A patched version of the package is available...
CVE-2023-38272
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments...
CVE-2023-38272
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments...
CVE-2023-38272 IBM Cloud Pak System information disclosure
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments...
CVE-2023-38272
IBM Cloud Pak System vulnerabilities CVE-2023-38272 affect versions 2.3.3.0 through 2.3.4.1. The issue could allow a user with network access to read sensitive information from CLI arguments, indicating a information disclosure flaw in CLI handling. The connected IBM bulletin confirms the impact ...
CVE-2023-38272 IBM Cloud Pak System information disclosure
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments...
CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...
CVE-2024-9773
Summary of CVE-2024-9773 (GitLab EE) An input validation flaw in the Harbor registry integration affects GitLab Enterprise Edition (EE) versions: 14.9 through 17.8.6, 17.9 through 17.8.3, and 17.10 through 17.10.1. The issue could allow a maintainer to inject malicious code into CLI commands show...
CVE-2024-9773
Removed by vendor...
Security Bulletin: IBM Cloud Pak System cli is vulnerable to sensitive information exposure
Summary IBM Cloud Pak System cli is vulnerable to sensitive information exposure. CVE-2023-37405, CVE-2023-38272 Vulnerability Details CVEID:CVE-2023-37405 DESCRIPTION: IBM Cloud Pak System stores sensitive data in memory, that could be obtained by an unauthorized user. CWE:CWE-311: Missing...
Security update for azure-cli-core
This update for azure-cli-core fixes the following issues: CVE-2025-24049: Fixed improper neutralization of special elements used in a command allows an unauthorized attacker to elevate privileges locally bsc1239460. Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2025:1019-1 Security update for azure-cli-core
This update for azure-cli-core fixes the following issues: - CVE-2025-24049: Fixed improper neutralization of special elements used in a command allows an unauthorized attacker to elevate privileges locally bsc1239460...
argocd-cli-2.14.8-1.1 on GA media (moderate)
argocd-cli-2.14.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:14921-1 Rating: moderate Cross-References: CVE-2025-26791 CVSS scores: CVE-2025-26791 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2025-26791 SUSE : 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA...
1food-menu (>=0.0.1 <=0.2.3), 7qb-cli (=2.0.0) +2706 more potentially affected by CVE-2025-30208 via vite (>=0.14.4 <=4.5.1)
vite NPM version =0.14.4, =0.0.1, =1.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.3, =1.0.1, =1.0.12, =0.0.4, =1.0.1, =1.0.7 and more Source cves: CVE-2025-30208 Source advisory: OSV:GHSA-X574-M823-4X7W...
Malicious code in sensort-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da08217a79ac25925bb75373056d29208390b88fa6a4e75d27f6c5889b5a4943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2705 Malicious code in sensort-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da08217a79ac25925bb75373056d29208390b88fa6a4e75d27f6c5889b5a4943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2644 Malicious code in asset_cli_tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56eaa865141139174bfeca87a7ab5f743c5025167bf539b16b8688232094d479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2025:14921-1 argocd-cli-2.14.8-1.1 on GA media
These are all security issues fixed in the argocd-cli-2.14.8-1.1 package on the GA media of openSUSE Tumbleweed...
