CVE-2020-28446

The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js...

CVE-2020-28443

This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js...

CVE-2020-28443 Command Injection

This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js...

PT-2022-8898

Name of the Vulnerable Software and Affected Versions ntesseract versions prior to 0.2.9 Description The issue concerns Command Injection via lib/tesseract.js. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world inciden...

CVE-2020-28438: Improper Neutralization of Special Elements used in a Command

This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js...

CVE-2020-28443: Improper Neutralization of Special Elements used in a Command

This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js...

Webmin 安全漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in versions of Webmin prior to 1.997, which stems from the lack of HTML escaping of UI commands in its software/apt-lib.pl component...

CVE-2020-28446: Improper Neutralization of Special Elements used in a Command

The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js...

Malicious code in ppreact-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f7534b83a5c4624c7461c8931f2b4ba94277bb3aa0f1fd47d499e7f9a0f70ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5439 Malicious code in ppreact-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f7534b83a5c4624c7461c8931f2b4ba94277bb3aa0f1fd47d499e7f9a0f70ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS 2.0 SP9 : c-ares (EulerOS-SA-2022-1959)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw...

CVE-2021-40642: Missing Encryption of Sensitive Data

Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribute via textpattern/lib/txplibmisc.php. The secure flag is not set for txplogin session cookie in the application. If the secure flag is not set, then the cookie will be...

PT-2022-31272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.13 Description The issue is related to a fix in the lib/string helpers module, specifically concerning the addition of strarray to a device's resource list. The actual impact and attack plausibility ha...

PT-2022-30928

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a problem in the lib/string helpers module where a strarray is not added to a device's resource list. This is an automated ID intended to aid in discovery of potential...

Malicious Package

Overview vue-admin-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview erc-20-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview @spinak/iac-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious Package

Overview lib-admin-ui is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Debian DLA-3057-1 : request-tracker4 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3057 advisory. - Best Practical Request Tracker RT 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against...

MAL-2022-2296 Malicious code in cwpattern-lib-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a11073993604b52c3fb8ea34661d29f0b623df28896d64893a1705445c91e2e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...