Juniper Networks Junos OS 资源管理错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS, which can be exploited to trigger a denial ...

MAL-2022-2540 Malicious code in dn-dev-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dn-dev-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ajax-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8067a242f83704cddf8ecff50a82cdb22ed341edee9645a934387150b469c45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-917 Malicious code in ajax-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8067a242f83704cddf8ecff50a82cdb22ed341edee9645a934387150b469c45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @maui-mf/common-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0266e00c61c83cf412bd4b53bc814121b7ec42d2e712ca9c6a92f3a403346542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2021-41683

There is a stack-overflow at ecma-helpers.c:326 in ecmagetlexenvtype in JerryScript 2.4.0...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds read vulnerability exists in Google Android, which originates in exynossecEnvinit in mach-gs101.c. An out-of-bounds read may occur due to a boundary checking error. An attacker could exploit this...

acuity (=6.18.0), acuitypro (=6.18.0) +60 more potentially affected by CVE-2022-29211 via tensorflow (>=2.8.0 <=2.8.0rc1)

tensorflow PYPI version =2.8.0, =1.2.8, =1.0.43, =0.2.2, =0.0.1, =0.0.2, =0.2.8, =0.14.0, =0.1.3, =0.0.9, =0.2.27, =0.2.41 - complaintclassify =0.0.5 - conversational-sentence-encoder =0.0.6 and more Source cves: CVE-2022-29211 Source advisory: OSV:GHSA-XRP2-FHQ4-4Q3W...

new packages: perl-Env

An update is available for perl-Env. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

PT-2022-18281 · Jenkins · Jenkins Parameterized Trigger Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Parameterized Trigger Plugin versions 2.43 and earlier Description: The issue concerns the capture and storage of environment variables, including password parameter values, in build.xml files by the Jenkins Parameterized Trigger...

CVE-2022-0563

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...

PT-2022-1723 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is caused by a heap-based buffer overflow in the compile get env function of the vim text editor. This can allow an attacker to execute arbitrary code. The estimated number of...

fnoc (>=0.3.0 <=0.3.2), jsoncfg (>=0.0.1 <=0.1.2) +2 more potentially affected by CVE-2020-28269 via field (=0.0.1)

field NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on field and may be impacted: - fnoc =0.3.0, =0.0.1, =0.4.1, =0.4.0, =0.5.0 Source cves: CVE-2020-28269 Source advisory: OSV:GHSA-HM82-QR45-H7MW...

CVE-2021-43780

Redash is a package for data visualization and sharing. In versions 10.0 and priorm the implementation of URL-loading data sources like JSON, CSV, or Excel is vulnerable to advanced methods of Server Side Request Forgery SSRF. These vulnerabilities are only exploitable on installations where a...

env-team.com Cross Site Scripting vulnerability OBB-2134619

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Security update for golang-github-prometheus-prometheus (moderate)

openSUSE Security Update: Security update for golang-github-prometheus-prometheus Announcement ID: openSUSE-SU-2021:2664-1 Rating: moderate References: 1186242 SLE-18254 Cross-References: CVE-2021-29622 CVSS scores: CVE-2021-29622 NVD : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected...

CVE-2021-22925

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

CVE-2021-22925

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

Buildah processes using chroot isolation may leak environment values to intermediate processes

Impact When running processes using "chroot" isolation, the process being run can examine the environment variables of its immediate parent and grandparent processes CVE-2021-3602. This isolation type is often used when running buildah in unprivileged containers, and it is often used to do so in...