Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-26777

Malicious code in bioql PyPI...

7.8CVSS7.5AI score0.00172EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.15 views

openSUSE: Security Advisory for libzypp (SUSE-SU-2023:0095-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00172EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:21 a.m.3 views

SUSE CVE-2023-22643

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...

6.3CVSS7.3AI score0.00172EPSS
Exploits1References5
OSV
OSV
added 2023/02/07 10:15 a.m.2 views

CVE-2023-22643

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...

7.8CVSS7.2AI score0.00172EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/02/07 12:0 a.m.15 views

CVE-2023-22643 libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...

6.3CVSS8AI score0.00172EPSS
Exploits1References1
CVE
CVE
added 2023/02/07 12:0 a.m.62 views

CVE-2023-22643

CVE-2023-22643 affects libzypp-plugin-appdata in SUSE Linux Enterprise Server for SAP 15-SP3 and openSUSE Leap 15.4. The issue is an OS command injection vulnerability due to improper neutralization of special elements in repo configuration (REPO_ALIAS, REPO_TYPE, REPO_METADATA_PATH) that can be ...

7.8CVSS6.9AI score0.00172EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/07 12:0 a.m.5 views

CVE-2023-22643 libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...

6.3CVSS7.6AI score0.00172EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/01/26 12:0 a.m.13 views

SUSE: Security Advisory (SUSE-SU-2023:0140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00172EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2023/01/26 12:0 a.m.26 views

SUSE SLES15 Security Update : libzypp-plugin-appdata (SUSE-SU-2023:0140-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0140-1 advisory. - An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUS...

7.8CVSS7.7AI score0.00172EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2023/01/18 12:0 a.m.29 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libzypp-plugin-appdata (SUSE-SU-2023:0095-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0095-1 advisory. - An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerabili...

7.8CVSS7.7AI score0.00172EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/01/18 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2023:0095-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00172EPSS
Exploits1References2
OSV
OSV
added 2023/01/17 11:59 a.m.4 views

SUSE-SU-2023:0095-1 Security update for libzypp-plugin-appdata

This update for libzypp-plugin-appdata fixes the following issues: - CVE-2023-22643: Fixed potential shell injection related to malicious repo names bsc1206836...

7.8CVSS7.7AI score0.00172EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/01/04 12:0 a.m.1 views

PT-2023-1560 · Suse · Libzypp-Plugin-Appdata +1

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426 openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426 Description: The issue is related to an Improper...

7.8CVSS7.6AI score0.00172EPSS
Exploits1References17
Rows per page
Query Builder