11549 matches found
@bahmutov/add-typescript-to-cypress (>=1.0.2, <=1.1.1), @betit/orion (>=1.0.0-beta.1, <=1.0.0-beta.6) +176 more potentially affected by CVE-2017-16137 via debug (>=3.0.0, <=3.0.1)
debug NPM version =3.0.0, =1.0.2, =1.0.0-beta.1, =1.0.0-beta.6, =2.0.1-SNAPSHOT.88, =0.0.4, =0.0.12, =1.0.1, =1.0.0, =1.0.0, =0.1.5, =2.8.0, =1.0.71, =1.0.10-14, =1.1.16 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...
@0ti.me/test-deps (>=0.1.1, <=0.1.22), @0ti.me/ts-test-deps (>=0.1.0, <=0.1.3) +2449 more potentially affected by CVE-2017-16137 via debug (>=3.2.0, <=3.2.6)
debug NPM version =3.2.0, =0.1.1, =0.1.0, =1.0.0, =0.2.39, =1.0.2, =2.0.3, =1.1.1, =0.0.34, =1.0.1, =1.0.2, =1.0.2, =0.0.2, =0.0.2, =0.1.0, =0.3.0 and more Source cves: CVE-2017-16137 Source advisory: GHSA-GXPJ-CX7G-858C...
0.8.18-p11 (0.8.18-p12), 04_nodeblog (1.0.0) +25774 more potentially affected by CVE-2017-16137 via debug (>=2.0.0, <=2.6.8)
debug NPM version =2.0.0, =1.0.0, =0.0.15, =1.0.4, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.2 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...
1ib (>=1.0.9, <=1.0.11), 20190403-utils (1.0.0) +10618 more potentially affected by CVE-2017-16137 via debug (>=4.0.0, <=4.3.0)
debug NPM version =4.0.0, =1.0.9, =1.0.1, =1.1.2, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0-alpha.19, =1.2.3 and more Source cves: CVE-2017-16137 Source advisory: GHSA-GXPJ-CX7G-858C...
GHSA-GXPJ-CX7G-858C Regular Expression Denial of Service in debug
Affected versions of debug are vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. As it takes 50,000 characters to block the event loop for 2 seconds, this issue is a low severity issue. This was later re-introduced in version v3.2.0, and...
Regular Expression Denial of Service in debug
Affected versions of debug are vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. As it takes 50,000 characters to block the event loop for 2 seconds, this issue is a low severity issue. This was later re-introduced in version v3.2.0, and...
0.8.18-p11 (0.8.18-p12), 04_nodeblog (1.0.0) +25774 more potentially affected by CVE-2017-16137 via debug (>=2.0.0, <=2.6.8)
debug NPM version =2.0.0, =1.0.0, =0.0.15, =1.0.4, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.2 and more Source cves: CVE-2017-16137 Source advisory: GHSA-GXPJ-CX7G-858C...
1ib (>=1.0.9, <=1.0.11), 20190403-utils (1.0.0) +10618 more potentially affected by CVE-2017-16137 via debug (>=4.0.0, <=4.3.0)
debug NPM version =4.0.0, =1.0.9, =1.0.1, =1.1.2, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0-alpha.19, =1.2.3 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...
@bahmutov/add-typescript-to-cypress (>=1.0.2, <=1.1.1), @betit/orion (>=1.0.0-beta.1, <=1.0.0-beta.6) +176 more potentially affected by CVE-2017-16137 via debug (>=3.0.0, <=3.0.1)
debug NPM version =3.0.0, =1.0.2, =1.0.0-beta.1, =1.0.0-beta.6, =2.0.1-SNAPSHOT.88, =0.0.4, =0.0.12, =1.0.1, =1.0.0, =1.0.0, =0.1.5, =2.8.0, =1.0.71, =1.0.10-14, =1.1.16 and more Source cves: CVE-2017-16137 Source advisory: GHSA-GXPJ-CX7G-858C...
@0ti.me/test-deps (>=0.1.1, <=0.1.22), @0ti.me/ts-test-deps (>=0.1.0, <=0.1.3) +2449 more potentially affected by CVE-2017-16137 via debug (>=3.2.0, <=3.2.6)
debug NPM version =3.2.0, =0.1.1, =0.1.0, =1.0.0, =0.2.39, =1.0.2, =2.0.3, =1.1.1, =0.0.34, =1.0.1, =1.0.2, =1.0.2, =0.0.2, =0.0.2, =0.1.0, =0.3.0 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...
Tamper proofing review: the iZettle card payment terminal
Tamper resistance is an increasingly important factor in smart devices. Together with secure hardware design and defensive coding, it can deliver a very secure device. One of the most common areas the average consumer will encounter tamper resistant devices is in payment terminals, or Pin Entry...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4189)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4189 advisory. - tcp: add tcpoootrycoalesce helper Eric Dumazet Orabug: 28453849 CVE-2018-5390 - tcp: call tcpdrop from tcpdataqueueofo Eric Dumazet Orabug: 28453849...
katello-debug Arbitrary File Overwrite Vulnerability
Katello is a system management engine that provides workflows for configuration management, subscription management and content management. katello-debug is one of the debuggers. An arbitrary file overwrite vulnerability exists in versions prior to katello-debug 3.4.0, which stems from the use of...
CVE-2018-7947
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153C00 have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific...
CVE-2018-7947
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153C00 have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific...
CVE-2018-7947
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153C00 have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific...
CVE-2018-7947: Improper Authentication
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153C00 have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific...
PT-2018-18345
Name of the Vulnerable Software and Affected Versions: Huawei mobile phones versions prior to 8.1.0.153C00 Description: The issue allows an attacker to bypass authentication on the device. This could be achieved by tricking the user into connecting to a malicious device. In debug mode, the...
Design/Logic Flaw
In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user...
