CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

ZNC Elevation of Privilege and Arbitrary Code Execution Vulnerabilities

ZNC is a set of IRC proxies that allow users to log in to IRC servers from their workstations. A security vulnerability exists in the Modules.cpp file in versions of ZNC prior to 1.7.4-rc1. A remote attacker can exploit this vulnerability to elevate privileges and execute arbitrary code with the...

Malicious Package

commander-js is a malicious package designed to take advantage of users making a mistake when typing the name of a module to install. All versions of this package is considered malicious and must not be used. The package downloads a malicious file and executes the contents after installation...

Git OS Command Injection Vulnerability

Git is a free, open source distributed version control system developed by American software developer Linus Torvalds Linus Torvalds. A command injection vulnerability exists in the Git operating system. The vulnerability can be exploited to execute arbitrary operating system commands with the he...

SUSE-SU-2015:1445-1 Security update for busybox

-The following issues are fixed by this update: CVE-2014-9645: do not allow / in module names to avoid loading bad modules bnc914660...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2513-1)

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

Ubuntu: Security Advisory (USN-2513-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2513-1: Linux kernel vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...